Project: 
Authenticator Login
Date: 
2025-August-27
Security risk: 
Moderately critical 13 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:Default
Vulnerability: 
Access bypass
Affected versions: 
<2.1.8
CVE IDs: 
CVE-2025-8093
Description: 

This module allows users to setup two-factor authentication (2FA) using authenticator apps for enhanced login security.

The module did not protect all possible login paths provided by core modules.

CVSS risk score (experimental) 6.3 / Medium

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Solution: 

Install the latest version:

  • If you use the Alogin module for Drupal 10^, upgrade to Alogin 2.1.8
Reported By: 
Fixed By: 
Coordinated By: