{"id":"INC-workos-s0c4t37t65pf","kind":"incident","aliases":[],"related":[],"title":"WorkOS: Elevated AuthKit API Error Rates","description":"We are investigating elevated error rates affecting AuthKit endpoints.","summary":null,"severity":"high","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"WorkOS","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["incident","ops","vendor","workos"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-13T00:15:40+00:00","first_seen_at":"2026-11-13T00:17:06+00:00","triaged_at":"2026-11-13T00:18:02+00:00","updated_at":"2026-11-13T00:29:53+00:00","category":"vendor","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'affect':22C 'api':4A 'authkit':3A,23C 'elev':2A,19C 'endpoint':24C 'error':5A,20C 'inc':8A 'inc-workos-s0c4t37t65pf':7A 'incid':12B 'investig':18C 'op':13B 'rate':6A,21C 's0c4t37t65pf':10A 'vendor':14B 'worko':1A,15B 'workos':9A,11A","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"pkeys":["workos"],"ptokens":["workos"],"labels":["high","incident","ops","vendor","workos"],"campaign_type":null,"search_a":"'api':4A 'authkit':3A 'elev':2A 'error':5A 'inc':8A 'inc-workos-s0c4t37t65pf':7A 'rate':6A 's0c4t37t65pf':10A 'worko':1A 'workos':9A,11A","search_b":"'incid':12B 'op':13B 'vendor':14B 'worko':15B","search_c":"'affect':22C 'authkit':23C 'elev':19C 'endpoint':24C 'error':20C 'investig':18C 'rate':21C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T00:15:40+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"statuspage","external_id":"workos:s0c4t37t65pf","url":"https://stspg.io/70nzpfsvtwp4","severity":"high","published_at":"2026-11-13T00:15:40+00:00","modified_at":"2026-11-13T00:28:58+00:00","first_seen_at":"2026-11-13T00:17:06+00:00","fetched_at":"2026-11-13T00:57:18+00:00","note":null}],"documents":[],"disclosures":[{"company":"WorkOS","domain":"workos.com","url":"https://workos.com/security/bulletins/update-for-october-30th-2026-data-security-incident","kind":"blog","published_at":"2026-11-06T00:00:00+00:00","quote":"We've identified the source of the unauthorized access to our internal tool: a security researcher whose AI agent escaped its testing environment.","confidence":0.949999988079071,"source":"model","created_at":"2026-11-08T16:43:10+00:00","entry":"exposed-secret"}],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}