{"id":"INC-northflank-cmuh4kc8h00s013pih51rz3uf","kind":"incident","aliases":[],"related":[],"title":"Northflank: Degraded SSO login via WorkOS","description":"Type: Incident\n    Duration: 46 minutes\n\n    Affected Components: Northflank App\n    Sep 25, 16:01:05 GMT+0 - Resolved - This incident has been resolved. Sep 25, 15:15:00 GMT+0 - Investigating - We are currently investigating this incident.","summary":null,"severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Northflank","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["incident","northflank","ops","vendor"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"resolved","published_at":"2026-09-25T15:15:00+00:00","first_seen_at":"2026-11-08T16:58:27+00:00","triaged_at":"2026-11-08T16:59:06+00:00","updated_at":"2026-11-08T16:59:06+00:00","category":"vendor","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'+0':31C,44C '00':42C '01':28C '05':29C '15':40C,41C '16':27C '25':26C,39C '46':19C 'affect':21C 'app':24C 'cmuh4kc8h00s013pih51rz3uf':10A 'compon':22C 'current':48C 'degrad':2A 'durat':18C 'gmt':30C,43C 'inc':8A 'inc-northflank-cmuh4kc8h00s013pih51rz3uf':7A 'incid':12B,17C,34C,51C 'investig':45C,49C 'login':4A 'minut':20C 'northflank':1A,9A,11A,13B,23C 'op':14B 'resolv':32C,37C 'sep':25C,38C 'sso':3A 'type':16C 'vendor':15B 'via':5A 'worko':6A","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"pkeys":["northflank"],"ptokens":["northflank"],"labels":["incident","northflank","ops","unknown","vendor"],"campaign_type":null,"search_a":"'cmuh4kc8h00s013pih51rz3uf':10A 'degrad':2A 'inc':8A 'inc-northflank-cmuh4kc8h00s013pih51rz3uf':7A 'login':4A 'northflank':1A,9A,11A 'sso':3A 'via':5A 'worko':6A","search_b":"'incid':12B 'northflank':13B 'op':14B 'vendor':15B","search_c":"'+0':31C,44C '00':42C '01':28C '05':29C '15':40C,41C '16':27C '25':26C,39C '46':19C 'affect':21C 'app':24C 'compon':22C 'current':48C 'durat':18C 'gmt':30C,43C 'incid':17C,34C,51C 'investig':45C,49C 'minut':20C 'northflank':23C 'resolv':32C,37C 'sep':25C,38C 'type':16C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-09-25T15:15:00+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"statuspage","external_id":"northflank:cmuh4kc8h00s013pih51rz3uf","url":"https://status.northflank.com/incident/cmuh4kc8h00s013pih51rz3uf","severity":null,"published_at":"2026-09-25T15:15:00+00:00","modified_at":"2026-09-25T15:15:00+00:00","first_seen_at":"2026-11-08T16:58:27+00:00","fetched_at":"2026-11-08T19:16:33+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}