CVE-2024-50487 describes an authentication bypass vulnerability in Acnoo's MaanStore API (versions up to 1.0.1). The issue allows attackers to circumvent authentication by exploiting an alternate path or channel within the API. This vulnerability is remotely exploitable without any privileges or user interaction and results in complete compromise of confidentiality, integrity, and availability. The CVSS 3.1 base score is 9.8, reflecting the critical nature of this flaw. No patch or official remediation guidance has been published yet, and no exploits have been observed in the wild.

Successful exploitation of this vulnerability allows an unauthenticated attacker to bypass authentication controls, potentially gaining unauthorized access to sensitive data and full control over the affected API. This can lead to complete compromise of the system's confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the MaanStore API to trusted networks and users only. Monitor vendor channels for updates and apply patches promptly once released.