CVE-2024-50477 describes an authentication bypass vulnerability in Stacks Mobile App Builder (<= 5.2.3) that enables attackers to circumvent authentication mechanisms via an alternate path or channel. This allows unauthorized access to the application, potentially compromising all security properties (confidentiality, integrity, availability). The vulnerability is remotely exploitable without privileges or user interaction, reflected by a CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). No vendor patch or advisory details are currently provided.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to gain unauthorized access to the application, leading to full compromise of data confidentiality, integrity, and availability. This could result in unauthorized data access, modification, or denial of service within the affected application environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected application where possible and monitor for unusual access patterns. Avoid exposing the application to untrusted networks if feasible.