CVE-2026-123800

SuperTokens Core (an open-source authentication server) contains a vulnerability in Multitenancy.checkPermissionsForCreateOrUpdate within src/main/java/io/supertokens/multitenancy/Multitenancy.java. The root cause is inadequate authorization when updating a parent connection URI domain or the bas...