During a formal analysis of OpenID Federation, a security vulnerability was discovered and corrective actions have already been taken.