The vulnerability of the retrieveById() function in the Laravel Passport OAuth2 server implementation allows a hacker to gain unauthorized access to protected information.

The vulnerability of the retrieveById function in the Laravel Passport OAuth2 server implementation is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

CVE-2026-39976: Improper Authentication

Laravel Passport provides OAuth2 server support to Laravel. From 13.0.0 to before 13.7.1, there is an Authentication Bypass for clientcredentials tokens. the league/oauth2-server library sets the JWT sub claim to the client identifier since there's no user. The token guard then passes this value ...