Hacker News

points by SamyPesse 4 days ago | 0 comments

We’ll provide details in a long post-mortem. For now, it was important to notify our users as early as possible.

two days later...

Sorry about that, I should have posted here. We posted a post mortem yesterday: https://www.gitbook.com/status/security-incident-2026-11-03

Thanks Samy.

"Using a flaw in GitBook’s SSO login flow, they were able to create login sessions acting as GitBook staff."

Since this has now been closed, can we have more details on what happened?