RUCKUS Network Director (RND) versions prior to 4.5 contain a critical vulnerability that allows an attacker to spoof an administrator JSON Web Token (JWT) if they know a hardcoded secret key. This flaw enables unauthorized administrative access to the system.