CVE-2025-66698 describes an authentication bypass vulnerability in Semantic Machines version 5.4.8. Attackers can exploit this issue by sending crafted HTTP requests to multiple API endpoints, circumventing authentication controls. The vulnerability has a CVSS v3.1 base score of 8.6, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, scope changed, and high impact on confidentiality. There is no evidence of known exploits in the wild or vendor-provided patches at this time.

Successful exploitation allows an unauthenticated attacker to bypass authentication mechanisms, potentially gaining unauthorized access to sensitive functionality or data within the affected Semantic Machines system. The confidentiality impact is high, but integrity and availability impacts are not indicated.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected API endpoints and monitor for suspicious HTTP requests that may attempt to exploit this vulnerability.