CVE-2026-37171

SuperTokens Core versions 6.0.0 to 11.4.0 exhibit a vulnerability due to inadequate tenant separation, enabling authenticated users from one tenant to access the sessions, data, and endpoints of another tenant. This flaw poses a risk of unauthorized data exposure and potential data manipulation across tenants. Organizations utilizing SuperTokens for multi-tenant applications should prioritize addressing this vulnerability to safeguard sensitive information and maintain tenant isolation.