Security Advisories

This vulnerability applies only to users of Hosted AuthKit with password authentication and multi-factor authentication (MFA) enabled. If an attacker had obtained the user's password, they could have bypassed the MFA process by enrolling a new authentication factor. However, this vulnerability was never exploited and has since been remediated. No further action is required.