This vulnerability in RafyMrX TOKO-ONLINE-ROTI up to commit ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99 involves missing authentication in an unspecified component. The weakness allows remote attackers to bypass authentication mechanisms. Due to the product's rolling release model, precise affected versions cannot be determined. The vendor has not provided any response or patch information. The CVSS 4.0 base score is 6.9, reflecting a medium severity with network attack vector, low attack complexity, no privileges or user interaction required, and low impacts on confidentiality, integrity, and availability.

The vulnerability enables remote attackers to bypass authentication controls, potentially gaining unauthorized access to the affected system or functionality. The impact is rated medium severity based on CVSS 4.0 with low confidentiality, integrity, and availability impacts. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch or workaround is available, users should monitor for vendor updates and consider implementing compensating controls such as restricting network access to the affected system until a fix is released.