CVE-2025-27370 | OpenID Connect up to 1.0 errata set 2 private_key_jwt authorization

A vulnerability was found in OpenID Connect up to 1.0 errata set 2. It has been declared as problematic. This vulnerability affects unknown code of the component private_key_jwt. The manipulation leads to incorrect authorization.

This vulnerability was named CVE-2025-27370. The attack can be initiated remotely. There is no exploit available.