CVE-2026-123797

SuperTokens Core , an open-source authentication server, is vulnerable to an authentication bypass prior to versions 11.3.6, 11.4.6, and 12.0.8 . The root cause lies in src/main/java/io/supertokens/webserver/WebserverAPI.java, where checkIPAccess and assertThatAPIKeyCheckPasses suppress TenantOrA...