unscored
CVE-2026-118554
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID Connect Client allows Authentication Bypass.
Impact
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID Connect Client allows Authentication Bypass. This issue affects OpenID Connect Client versions: from 0.0.0 to 2.3.1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Drupal | OpenID Connect Client | from 0.0.0 before 2.3.1 |