CVE-2026-118554

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID Connect Client allows Authentication Bypass. This issue affects OpenID Connect Client versions: from 0.0.0 to 2.3.1...

EUVD-2026-113687

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID Connect Client allows Authentication Bypass. This issue affects OpenID Connect Client versions: from 0.0.0 to 2.3.1...

CVE-2026-118554

The Drupal OpenID Connect Client module (versions 0.0.0 to 2.3.1 ) contains an authentication bypass vulnerability. The root cause is that the module attempts to link a new user logging in via OpenID Connect (oAuth2) to an existing account sharing the same email address. This allows an attacker t...