CVE-2022-31013

CVE-2022-31013 is a critical authentication bypass vulnerability affecting versions 2.3.2 through 2.6.0 of the Chat Server for Vartalap, an open-source messaging application. The flaw stems from improper validation of access tokens, where the asynchronous verification function is not awaited, leading to successful authentication even with invalid tokens. This vulnerability carries a CVSS score of 9.8 (Critical), indicating a severe impact with complete compromise of confidentiality, integrity, and availability possible, and can be exploited remotely without authentication. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with 10 mentions, suggesting awareness among security researchers.