Authentication Bypass in User Accounts by Undisclosed Vendor

CVE-2025-3091

What is CVE-2025-3091?

A vulnerability exists in the user authentication mechanism that allows a low privileged remote attacker who possesses the second factor of another user to bypass the password requirement and gain unauthorized access to the victim's account. This exploitation can lead to significant security risks, as it enables access to sensitive information without proper authorization.

References