🎯 Broken authentication

The items that name it 3

• The Most Common Security Vulnerabilities in AI-Generated Code | Blog | Endor Labs
  article2026-09-11It is written here as Broken authentication (CWE-306).

  Results from prompts that omit security guidance, e.g. a prompt like "hook up to a database and display user scores" bypassing authentication entirely

• Strix
  repo2026-07-15It is written here as Broken authentication (API).

  API security issue tested by Strix

• claude-code-security-review
  repo2026-05-10

  Authentication & authorization flaw category detected by the tool