Kaixuan Luo
Kaixuan Luo is a PhD candidate at Mobile Technologies Centre (MobiTeC), the Chinese University of Hong Kong (CUHK). His research focuses on web security and its intersection with digital identities. Recently, he has been focusing on analyzing authorization issues in emerging ecosystems and architectural patterns such as Agentic AI.
Session
05-29
11:00
30min
Understanding OAuth Session Fixation in Connector Ecosystems
Kaixuan Luo
Session fixation attacks affect certain OAuth-related standards but remain unexamined in mainstream OAuth 2.0 deployments. We identify 40+ vulnerable vendors in "connector ecosystems" for app integration and agentic AI, and propose mitigations.
Work Lab II