← Database

CVE-2026-37171

MEDIUM CVSS: 5.9 Published: 2026-08-07 Modified: 2026-08-07

Description

A lack of tenant separation in SuperTokens Inc. SuperTokens Core v6.0.0 to v11.4.0 allows an authenticated party in one tenant to access sessions, data, and endpoints of another tenant.

Affected Platforms

Unknown

Weakness Type

CWE-863

References