This vulnerability in Metagauss ProfileGrid allows an attacker to bypass authentication by exploiting the password recovery feature through an alternate path or channel. It affects all versions up to and including 5.9.9.6. The CVSS 3.1 base score is 7.5, indicating high severity, with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. No vendor advisory or patch information is currently available, and the vulnerability is publicly disclosed as of July 2026.

Successful exploitation can lead to an attacker bypassing authentication and gaining unauthorized access to user accounts by exploiting the password recovery process. This compromises the integrity of user accounts but does not affect confidentiality or availability according to the CVSS vector. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific temporary mitigations are documented.