CVE-2026-15615

The CVE-2026-15615 issue concerns Logto’s SAML handling. The root cause is the omission of validation for the SAML element, which allows an attacker to strip time and audience restrictions and replay assertions indefinitely. This is documented in the connected sources as affecting Logto’s SAML f...