Authentication Bypass Vulnerability in Drupal OpenID Connect / OAuth Client

CVE-2026-3531

What is CVE-2026-3531?

An authentication bypass vulnerability has been identified in the Drupal OpenID Connect / OAuth client. This vulnerability allows an attacker to bypass intended authentication mechanisms by exploiting alternate paths or channels. The issue affects all versions prior to 1.5.0, potentially allowing unauthorized access to sensitive areas of protected resources. It is critical for users of the affected products to update to the latest versions to safeguard their applications from this security risk. For more details, visit the official Drupal advisory.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References