An authentication bypass vulnerability in the Vulnerability-Lookup software allows attackers to intercept and replay tokens to compromise user accounts.

The software fails to properly secure its account recovery and activation mechanisms against capture-replay attacks (CWE-294), allowing an authenticated attacker to potentially assume control of other user sessions.

This vulnerability enables unauthorized access to user accounts, which could lead to the exposure of sensitive platform data or administrative account takeover. With a CVSS score of 8.8, this flaw represents a significant risk to the overall security posture and trust of the application.

Immediate Action: Review the vendor repository for the latest security patches. If a specific patch version is not yet released, implement temporary restrictions on the password recovery and account activation features.

Proactive Monitoring: Monitor authentication logs for anomalous patterns, specifically multiple successful password resets or account activations occurring from unusual IP addresses.

Compensating Controls: Enforce multi-factor authentication (MFA) for all users to mitigate the impact of compromised account credentials.

Public Exploit Available: No

Security teams must prioritize monitoring for any signs of unauthorized account modifications. It is critical to apply the vendor-provided patch as soon as it becomes available to prevent potential session hijacking and identity theft.