Product
YunaiV yudao-cloud up to version 2026.01 is vulnerable to improper authentication due to a flaw in the getAccessToken function, allowing remote attackers to bypass authentication.