CVE-2025-5769 is a cross-site scripting (XSS) vulnerability in an authentication endpoint where user input is not properly encoded before being rendered on the web page. This flaw allows attackers to inject malicious JavaScript that executes in the victim's browser, potentially redirecting users, altering page content, or stealing information. The vulnerability does not allow session hijacking due to the use of the httpOnly flag on session cookies.