PT-2025-41616 · Drupal · Drupal Authenticator Login

Ahmed Raza + 6 · Published 2025-10-10 · Updated 2026-01-05 · CVE-2025-8093

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Drupal Authenticator Login versions prior to 2.1.8

Description An authentication bypass issue exists in Drupal Authenticator Login. This allows attackers to bypass authentication mechanisms by utilizing an alternate path or channel.

Recommendations Update Drupal Authenticator Login to version 2.1.8 or later.

Fix

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2025-8093

DRUPAL-CONTRIB-2025-098

Affected Products

Drupal Authenticator Login

References · 8

• https://osv.dev/vulnerability/CVE-2025-8093 · Vendor Advisory
• https://drupal.org/sa-contrib-2025-098 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-8093 · Security Note
• https://t.me/cveNotify/147709 · Telegram Post
• https://twitter.com/CVEnew/status/1976780279806103786 · Twitter Post
• https://t.me/cveNotify/138296 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1976906737488658506 · Twitter Post
• https://t.me/CVEtracker/34630 · Telegram Post