A vulnerability exists in crocodilestick Calibre-Web-Automated up to version 4.0.6 in the Admin Endpoint component (file cps/cwa_functions.py). This flaw allows remote attackers to bypass authentication, potentially leading to unauthorized actions. Exploit code has been published, but the project has not yet issued a fix or official response.