CVE-2026-123804 | SuperTokens Core up to 12.3.0 Session Management createNewSession race condition

November 9, 2026 Yanac

A vulnerability was found in SuperTokens Core up to 12.3.0. It has been declared as critical. The affected element is the function createNewSession of the component Session Management. The manipulation results in race condition.

This vulnerability is reported as CVE-2026-123804. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More