A vulnerability was identified in jofpin trape 1.0.0. (CVE-2026-85636)

CVE-2026-85636 is a vulnerability in jofpin trape version 1.0.0 involving an unknown functionality within the core/stats.py file of the Login Endpoint component. The flaw allows attackers to bypass authentication remotely, potentially granting unauthorized access. The vulnerability is classified under CWE-287 (Improper Authentication). Although exploit code is publicly available, there is no evidence of active exploitation in the wild. The project maintainers have been notified but have not provided a response or patch at this time.

The vulnerability enables remote attackers to bypass authentication mechanisms, which could allow unauthorized access to the affected system. The CVSS score of 5.3 (medium severity) reflects a low impact on confidentiality, no impact on integrity or availability, and no required privileges or user interaction for exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the project has not responded or released a fix, users should monitor official channels for updates and consider implementing compensating controls such as restricting access to the Login Endpoint until a patch is available.