CVE-2026-13089 | RITOU OIDC::Lite up to 0.12.1 ID Token Verification verify alg signature verification

July 22, 2026 Yanac

A vulnerability was found in RITOU OIDC::Lite up to 0.12.1. It has been classified as critical. This vulnerability affects the function OIDC::Lite::Model::IDToken::verify of the component ID Token Verification. This manipulation of the argument alg causes improper verification of cryptographic signature.

The identification of this vulnerability is CVE-2026-13089. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More