An authentication bypass vulnerability exists in myCred up to version 4.0.1 that allows identity spoofing. This flaw could enable an attacker with some privileges to bypass authentication controls, potentially leading to limited integrity impact without affecting confidentiality or availability.