CVE-2026-15614

The Logto identity and access management platform contains a vulnerability where it fails to atomically handle IdP-initiated SAML sessions . Specifically, session lookup and session deletion are performed as separate steps; because the lookup response is returned before deletion completes, any er...