The sayan365 student-management-system contains an improper authentication vulnerability that impacts multiple endpoints. This flaw allows remote attackers to bypass authentication mechanisms without requiring privileges or user interaction. The product's rolling release model prevents precise version identification for affected or fixed releases. The vulnerability was disclosed publicly with a CVSS 4.0 base score of 6.9, indicating a medium severity level. No official remediation or patch has been announced by the vendor as of the publication date. Exploit code is publicly available, increasing the risk of exploitation.

Successful exploitation of this vulnerability enables attackers to bypass authentication controls remotely, potentially gaining unauthorized access to the system. This could lead to unauthorized data access or manipulation within the student-management-system. The medium CVSS score reflects the significant but not critical impact due to the lack of required privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should monitor official channels for updates. Until a patch is available, consider restricting external access to the affected system and implementing additional authentication controls or network-level protections to mitigate risk.