A critical vulnerability (CVE-2025-54576, CVSS 9.1) in OAuth2-Proxy allows attackers to bypass authentication by manipulating query parameters that match skip_auth_routes regex patterns.
A critical vulnerability (CVE-2025-54576, CVSS 9.1) in OAuth2-Proxy allows attackers to bypass authentication by manipulating query parameters that match skip_auth_routes regex patterns.