Threats affecting pkg:github/6amtech/6valley

CVE-2026-122019 is an authorization bypass vulnerability in 6amTech 6valley version 16.0. It affects the existingAccountCheck function in the /api/v1/auth/existing-account-check endpoint within the Social Login Flow component. The vulnerability arises from manipulation of the user_response argument, allowing an attacker to bypass authorization remotely. Public exploit code is available for this vulnerability.