CVE-2026-37171

n/a / n/a PUBLISHED

Description (CNA)

A lack of tenant separation in SuperTokens Inc. SuperTokens Core v6.0.0 to v11.4.0 allows an authenticated party in one tenant to access sessions, data, and endpoints of another tenant.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://whitenbaker.com/supertokens-core-multitenant-advisory

ADP enrichment

CISA-ADP

No English description supplied.

https://whitenbaker.com/supertokens-core-multitenant-advisory/

CVE

No English description supplied.

http://www.openwall.com/lists/oss-security/2026/09/09/4