CVE-2026-123797 | Supertokens Core up to 11.3.5/11.4.5/12.0.7 API Key Enforcement WebserverAPI.java checkIPAccess/assertThatAPIKeyCheckPasses privileges management

A vulnerability described as problematic has been identified in Supertokens Core up to 11.3.5/11.4.5/12.0.7. Affected by this issue is the function checkIPAccess/assertThatAPIKeyCheckPasses of the file src/main/java/io/supertokens/webserver/WebserverAPI.java of the component API Key Enforcement. Such manipulation leads to improper privilege management.

This vulnerability is traded as CVE-2026-123797. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More