A vulnerability classified as critical has been found in OpenSC pam_pkcs11 0.6.12. Affected is the function pam_sm_authenticate. The manipulation leads to improper authentication.

This vulnerability is traded as CVE-2025-24531. Access to the local network is required for this attack to succeed. There is no exploit available.

It is recommended to apply a patch to fix this issue.