Skip to content
OpenAdvisories
Medium · 4.2 CVE-2026-3532 DRUPAL-CONTRIB-2026-027EUVD-2026-16389

OpenID Connect / OAuth client - Less critical - Access bypass - SA-CONTRIB-2026-027

Published Mar 26, 2026 · Updated Mar 27, 2026 · Assigned by drupal

Description

Improper Handling of Case Sensitivity vulnerability in Drupal OpenID Connect / OAuth client allows Privilege Escalation.This issue affects OpenID Connect / OAuth client: from 0.0.0 before 1.5.0.

Affected products

VendorProductAffectedFixed
Drupal OpenID Connect / OAuth client 0.0.0 – < 1.5.0 1.5.0

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/openid_connect < 1.5.0 1.5.0 DRUPAL-CONTRIB-2026-027

Advisories 1

References