Description
A lack of tenant separation in SuperTokens Inc. SuperTokens Core v6.0.0 to v11.4.0 allows an authenticated party in one tenant to access sessions, data, and endpoints of another tenant.
Medium · 5.9
CVE-2026-37171
EUVD-2026-54490GHSA-j7vw-hh5c-2w6x
A lack of tenant separation in SuperTokens Inc. SuperTokens Core v6.0.0 to v11.4.0 allows an authenticated party in one tenant to access se…
Published Aug 7, 2026 · Updated Sep 9, 2026 · Assigned by mitre