CVE-2026-118554
OpenID Connect Client - Moderately critical - Improper authentication - SA-CONTRIB-2026-287
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID Connect Client allows Authentication Bypass. This issue affects OpenID Connect Client versions: from 0.0.0 to 2.3.1.
CVSS 3.1 · 5.4 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products