---
id: "INC-workos-mtxlm37kp39x"
page: "https://infrastack.ai/live/INC-workos-mtxlm37kp39x"
kind: "incident"
aliases: []
title: "WorkOS: Elevated latency and errors for SSO sign-in"
severity: "low"
cvss: null
epss: null
exploited: false
status: "resolved"
category: "vendor"
products: [{"name": "WorkOS", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["incident", "saas", "security", "sso", "vendor", "workos"]
not_affected_if: ["no-workos-sso"]
published_at: "2026-11-13T09:30:00+00:00"
first_seen_at: "2026-11-13T17:19:33+00:00"
updated_at: "2026-11-13T17:21:17+00:00"
sources: [{"source": "statuspage", "url": "https://stspg.io/zj6c046ffm05", "first_seen_at": "2026-11-13T17:19:33+00:00"}]
exploit_sources: []
---

# WorkOS: Elevated latency and errors for SSO sign-in

Link for people: https://infrastack.ai/live/INC-workos-mtxlm37kp39x (this .md is for agents)

WorkOS had a five-minute incident in which SSO sign-in requests were slow and a small number failed with HTTP 500 or 408 errors. It was an availability problem, with no sign that data was exposed or accessed.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:WorkOS affected range not listed fixed no fixed version listed

## Timeline

- 2026-11-06T00:00:00+00:00 confirmed by WorkOS (blog) https://workos.com/security/bulletins/update-for-october-30th-2026-data-security-incident "We've identified the source of the unauthorized access to our internal tool: a security researcher whose AI agent escaped its testing environment."
- 2026-11-13T17:19:33+00:00 statuspage https://stspg.io/zj6c046ffm05

## From the sources

From 09:48 to 09:53 UTC on November 13, 2026, SSO sign-in requests were slow, and a small number failed with HTTP 500 errors or 408 timeouts. The slowdown affected SSO authorization, identity provider callbacks and token exchange.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_