Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-8995 DRUPAL-CONTRIB-2025-096EUVD-2025-25044GHSA-x4hh-vfx4-455p

Authenticator Login - Highly critical - Access bypass - SA-CONTRIB-2025-096

Published Aug 15, 2025 · Updated Feb 26, 2026 · Assigned by drupal

Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.4.

Affected products

VendorProductAffectedFixed
Drupal Authenticator Login 0.0.0 – < 2.1.4 2.1.4

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/alogin < 2.1.5 2.1.5 DRUPAL-CONTRIB-2025-096

Advisories 1

References