CVE-2025-54603

9.0 criticalEPSS 0.7%

Critical (9.0). EPSS 0.7% chance of exploitation in the next 30 days.

An incorrect OIDC authentication flow in Claroty Secure Access 3.3.0 through 4.0.2 can result in unauthorized user creation or impersonation of existing OIDC users.

Severity

CVSS 3.1

9.0 critical

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2025-10-14
Modified: 2026-09-08
Record from: the NVD, synced 2026-10-19

References

https://claroty.com
https://claroty.com/product-security/oidc-configurations-in-claroty-secure-access

Check your stack JSON