Logto vulnerabilities
6 published CVEs name Logto among the affected products.
- 6Published CVEs6 of them scored
- 6Last 12 monthspublished in the last year
- 4Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-15611
Unverified email-based SSO account linking
Logto · Logto
Critical9.1 - CVE-2026-15612
LOIDC nonce validation bypass
Logto · Logto
Critical9.1 - CVE-2026-15614
IdP-initiated SAML sessions not reliably invalidated (replay)
Logto · Logto
High7.5 - CVE-2026-15615
SAML <Conditions> element not validated
Logto · Logto
High7.5 - CVE-2026-15616
Local MFA not enforced during SSO sign-in
Logto · Logto
Critical9.1 - CVE-2026-15617
Principal/domain lookup without case normalization
Logto · Logto
Critical9.1