{"id":"INC-workos-y93f35k1l2x6","kind":"incident","aliases":[],"related":[],"title":"WorkOS: Elevated latency and errors on AuthKit authentication flows","description":"From 19:35 to 19:49 UTC AuthKit API request latency and error rates were elevated. Service has since recovered fully and we are monitoring.","summary":null,"severity":"medium","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"WorkOS","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["incident","ops","vendor","workos"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"resolved","published_at":"2026-11-12T19:55:52+00:00","first_seen_at":"2026-11-12T19:56:39+00:00","triaged_at":"2026-11-12T19:57:37+00:00","updated_at":"2026-11-12T20:56:12+00:00","category":"vendor","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'19':20C,23C '35':21C '49':24C 'api':27C 'authent':8A 'authkit':7A,26C 'elev':2A,34C 'error':5A,31C 'flow':9A 'fulli':39C 'inc':11A 'inc-workos-y93f35k1l2x6':10A 'incid':15B 'latenc':3A,29C 'monitor':43C 'op':16B 'rate':32C 'recov':38C 'request':28C 'servic':35C 'sinc':37C 'utc':25C 'vendor':17B 'worko':1A,18B 'workos':12A,14A 'y93f35k1l2x6':13A","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"pkeys":["workos"],"ptokens":["workos"],"labels":["incident","medium","ops","vendor","workos"],"campaign_type":null,"search_a":"'authent':8A 'authkit':7A 'elev':2A 'error':5A 'flow':9A 'inc':11A 'inc-workos-y93f35k1l2x6':10A 'latenc':3A 'worko':1A 'workos':12A,14A 'y93f35k1l2x6':13A","search_b":"'incid':15B 'op':16B 'vendor':17B 'worko':18B","search_c":"'19':20C,23C '35':21C '49':24C 'api':27C 'authkit':26C 'elev':34C 'error':31C 'fulli':39C 'latenc':29C 'monitor':43C 'rate':32C 'recov':38C 'request':28C 'servic':35C 'sinc':37C 'utc':25C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-12T19:55:52+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"statuspage","external_id":"workos:y93f35k1l2x6","url":"https://stspg.io/n9gh2s4yt8c0","severity":"medium","published_at":"2026-11-12T19:55:52+00:00","modified_at":"2026-11-12T20:55:45+00:00","first_seen_at":"2026-11-12T19:56:39+00:00","fetched_at":"2026-11-12T21:03:07+00:00","note":null}],"documents":[],"disclosures":[{"company":"WorkOS","domain":"workos.com","url":"https://workos.com/security/bulletins/update-for-october-30th-2026-data-security-incident","kind":"blog","published_at":"2026-11-06T00:00:00+00:00","quote":"We've identified the source of the unauthorized access to our internal tool: a security researcher whose AI agent escaped its testing environment.","confidence":0.949999988079071,"source":"model","created_at":"2026-11-08T16:43:10+00:00","entry":"exposed-secret"}],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}