A critical flaw in Google’s OAuth authentication system, a way for users to grant third-party applications access to their Google account information without sharing their password, has left millions of user accounts vulnerable to potential data theft, according to a recent report by Truffle security, an open-source security project.