CVE-2026-57176 | python-social-auth social-core up to 4.x Vend OAuth2 backend improper authentication

A vulnerability described as critical has been identified in python-social-auth social-core up to 4.x. The impacted element is an unknown function of the component Vend OAuth2 backend. The manipulation results in improper authentication.

This vulnerability is known as CVE-2026-57176. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More