What’s Vulnerable › Products

ory kratos vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your ory kratos version is affected

Latest ory kratos vulnerabilities

• CVE-2026-33503 — Ory Kratos has a SQL injection via forged pagination tokens (CVSS 7.2)
• CVE-2024-45042 — Ory Kratos's `highest_available` setting does not properly respect code + mfa credentials (CVSS 4.4)