CVE-2025-12466

The Drupal Simple OAuth (OAuth2) & OpenID Connect module is vulnerable to an Authentication Bypass Using an Alternate Path or Channel (CWE-288). This flaw allows an attacker to bypass authentication mechanisms, potentially gaining unauthorized access to the system. The issue affects versions 6.0....