CodeChecker versions prior to 6.24.2 contain an authentication bypass vulnerability (CVE-2024-10081) that allows unauthenticated users to gain superuser access to most API endpoints by using specifically crafted URLs ending with Authentication, Configuration, or ServerInfo. This bypass enables anonymous users to query, add, modify, and delete products on the server without authentication.