Logto vulnerabilities
6 published CVEs name Logto among the affected products.
- Published CVEs
- 6
- Last 12 months
- 6
- Critical
- 4
- Known exploited
- 0
Critical 4High 2Medium 0Low 0Not scored 0
Newest CVEs
- CVE-2026-15611
Unverified email-based SSO account linking
Logto · Logto
Critical9.1 - CVE-2026-15612
LOIDC nonce validation bypass
Logto · Logto
Critical9.1 - CVE-2026-15614
IdP-initiated SAML sessions not reliably invalidated (replay)
Logto · Logto
High7.5 - CVE-2026-15615
SAML <Conditions> element not validated
Logto · Logto
High7.5 - CVE-2026-15616
Local MFA not enforced during SSO sign-in
Logto · Logto
Critical9.1 - CVE-2026-15617
Principal/domain lookup without case normalization
Logto · Logto
Critical9.1