Płatnik has a vulnerability where it performs client-side authentication, allowing an attacker with access to any connected application instance to bypass login verification and authenticate as any user. This security flaw was fixed in version 10.02.002 (metric 242).