CVE-2024-45438 is a critical vulnerability in TitanHQ SpamTitan Email Security Gateway versions 8.00.x before 8.00.101 and 8.01.x before 8.01.14. It allows unauthenticated users to perform account-level actions via a crafted GET request to the quarantine.php interface. The flaw also causes the system to automatically create user records with quarantine settings when a non-existent email address is used, without requiring authentication.