Forkast·
WorkOS Four SAML SSO Bypasses Trace to a Dual-View XML Parsing Gap
2 outlets reporting
4
SAML SSO bypasses
Between September 24 and 27, 2026, security researcher Alex Tan reported four SAML SSO authentication bypasses to WorkOS. The root cause was a dual-view XML parsing gap. WorkOS parsed SAML responses multiple times using different XML…