This vulnerability, identified as CWE-288, is an authentication bypass issue in VaultDweller Leyka versions up to 3.32.3. It allows an attacker with low privileges to bypass authentication controls without user interaction, potentially leading to high confidentiality impact, low integrity impact, and low availability impact. The CVSS vector indicates network attack vector, low attack complexity, and privileges required are low. The vulnerability is published and assigned CVE-2026-66677 but lacks vendor remediation details or patch availability.

Successful exploitation could allow an attacker to bypass authentication mechanisms, leading to unauthorized access to sensitive information (high confidentiality impact). Integrity and availability impacts are rated low, suggesting limited ability to alter data or disrupt service. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor vendor communications for updates. No specific mitigations or workarounds are provided by the vendor at this time.