CVE-2026-102899
HighCVSS 7.6Exploitation Probability (EPSS)
Low risk29th percentile - higher than 29% of all known CVEs
Summary
Sentry versions 26.5.0 through 26.7.2 contain a vulnerability in the SAML SSO identity-linking flow. An attacker controlling a SAML identity provider can socially engineer an authenticated user into opening a malicious URL, link the attacker's identity to the victim's Sentry account, and take control of that account.
Risk Assessment
An attacker can take over a victim's Sentry account, potentially gaining access to application monitoring data and enabling further privilege escalation within the organization.
Recommendation
Upgrade self-hosted Sentry to version 26.7.2 or later; Sentry SaaS customers already received the remediation on July 27, 2026.
Other vulnerabilities in Sentry
See all- CVE-2026-42354Critical
Sentry, an error tracking and performance monitoring tool, from version 21.12.0 to before 26.4.1 contains a critical vulnerability in the SAML SSO implementation. An attacker can take over any user account by using a malicious SAML Identity Provider and another organization on the same Sentry instance. The victim's email address must be known. The issue is patched in version 26.4.1.
- CVE-2026-83803High
Sentry from 23.11.0 to 26.7.0 with relocation feature enabled unsafely deserializes a legacy database field while importing a user-supplied relocation archive. An authenticated user can craft an archive that causes arbitrary code execution in the import worker process.
- CVE-2026-83527High
An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated attacker to gain administrative level access.
- CVE-2021-47935High
Sentry 8.2.0 contains a remote code execution vulnerability that allows authenticated superusers to execute arbitrary commands by injecting malicious pickle-serialized objects through the audit log entry data parameter. Attackers can submit crafted POST requests to the admin audit log endpoint with base64-encoded compressed pickle payloads in the data field to achieve code execution with application privileges.
- CVE-2023-39531Medium
In Sentry, an error tracking and performance monitoring platform, there is a vulnerability that allows an attacker to retrieve a valid access token for another user during the OAuth token exchange. This issue affects versions from 10.0.0 to prior to 23.7.2 due to incorrect credential validation.
- CVE-2023-39349High
Sentry is an error tracking and performance monitoring platform. In versions from 22.1.0 to prior to 23.7.2, an attacker with access to a token with limited scopes can query `/api/0/api-tokens/` for a list of all tokens created by a user, including tokens with greater scopes.
- CVE-2023-36826High
Sentry is an error tracking and performance monitoring platform. In versions 8.21.0 through 23.5.2, an authenticated user could download a debug or artifact bundle from any organization and project with a known bundle ID, without needing permissions.
Original NVD description (English source)
Sentry is an application monitoring and error tracking platform. From 26.5.0 until 26.7.2, the SAML SSO identity-linking flow allows an attacker who controls a SAML identity provider to socially engineer an authenticated user into opening a malicious URL, link the attacker's identity to the victim's Sentry account, and take control of that account. The attack requires a browser that accepts the cross-site cookie context, including Firefox with SameSite=None cookies or Chromium with third-party cookies enabled. Sentry SaaS received the remediation on July 27, 2026, and self-hosted Sentry is fixed in version 26.7.2.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS