The krishankakkar gap-hub-user-role plugin suffers from a CSRF vulnerability that enables authentication bypass. This affects all versions up to 3.4.1. The vulnerability allows an attacker to perform unauthorized actions by exploiting the trust of an authenticated user, potentially leading to full compromise of the affected system's confidentiality, integrity, and availability. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability could allow an attacker to bypass authentication mechanisms, leading to unauthorized access and potentially full control over affected systems. The high CVSS score reflects the critical nature of the impact on confidentiality, integrity, and availability. However, no known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as verifying anti-CSRF tokens and restricting actions to trusted users. Monitor official vendor channels for updates and patches addressing this vulnerability.