CVE-2025-69101 describes an authentication bypass vulnerability in AmentoTech Workreap Core (<= 3.4.1) that enables attackers to circumvent authentication controls using an alternate path or channel. This vulnerability allows unauthorized access without valid credentials, resulting in complete compromise of the system's security properties. The CVSS 3.1 base score is 9.8, reflecting network attack vector, no required privileges or user interaction, and full impact on confidentiality, integrity, and availability. The vulnerability affects the Workreap Core product and was published on January 22, 2026. No patch or vendor advisory details are currently available.

Successful exploitation of this vulnerability allows attackers to bypass authentication controls entirely, granting unauthorized access to the affected system. This can lead to full compromise of sensitive data, unauthorized actions, and disruption of service. Given the critical CVSS score and the nature of the flaw, the impact is severe across confidentiality, integrity, and availability dimensions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected Workreap Core installations and monitor for suspicious activity related to authentication bypass attempts. Avoid exposing the vulnerable service to untrusted networks where possible.