CVE-2025-27370
Last modified
CVE-2025-27370 is a medium-severity vulnerability rated 6.9/10 on the CVSS scale. OpenID Connect Core through 1.0 errata set 2 allows audience injection in certain situations. When the private_key_jwt authentication mechanism is used, a malicious Authorization Server could trick a Client into writing attacker-controlled values into the audience, including token endpoints or issuer identifiers of other Authorization Servers. EPSS estimates a 0.32% chance of exploitation in the next 30 days.
Description
OpenID Connect Core through 1.0 errata set 2 allows audience injection in certain situations. When the private_key_jwt authentication mechanism is used, a malicious Authorization Server could trick a Client into writing attacker-controlled values into the audience, including token endpoints or issuer identifiers of other Authorization Servers. The malicious Authorization Server could then use these private key JWTs to impersonate the Client.
Metrics
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:N
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-27370?
How severe is CVE-2025-27370?
How do I fix CVE-2025-27370?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-27364In MITRE Caldera through 4.2.0 and 5.0.0 before 35bc06e, a R…10
- CVE-2025-27365IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0…6.5
- CVE-2025-27367IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to…6.5
- CVE-2025-27368IBM OpenPages 9.0 and 9.1 is vulnerable to information discl…4.3
- CVE-2025-27369IBM OpenPages with Watson 8.3 and 9.0 is vulnerable …4.3
- CVE-2025-2737A vulnerability was found in PHPGurukul Old Age Home Managem…9.8
- CVE-2025-27371In certain IETF OAuth 2.0-related specifications, when the J…6.9
- CVE-2025-27374An issue was discovered in the Secure Boot component in Sams…5.3
- CVE-2025-27377Altium Designer version 24.9.0 does not validate self-signed…5.3
- CVE-2025-27378AES contains a SQL injection vulnerability due to an inactiv…9.8
- CVE-2025-27379A stored cross-site scripting (XSS) vulnerability in the BOM…4.6
- CVE-2025-2738A vulnerability was found in PHPGurukul Old Age Home Managem…9.8
Are you affected by CVE-2025-27370?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST