Security Advisory
CVE-2026-15614
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Logto silently fails to delete IdP-initiated SAML sessions, enabling session replay and reuse within the session’s validity window.