CVE-2024-41276

CVE-2024-41276 is a critical authentication bypass vulnerability affecting Kaiten version 57.131.12 and earlier. Attackers can bypass the 6-digit PIN code authentication, which is sent to a user's email, by circumventing the request limiting mechanism and performing a brute-force attack. This allows for unauthorized access to the application. The vulnerability has a CVSS score of 9.8 (CRITICAL), indicating a severe risk due to its network-based attack vector, low attack complexity, and high potential impact on confidentiality, integrity, and availability. Its EPSS score of 0.1356 also suggests a higher-than-average probability of exploitation. Currently, there is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. However, the vulnerability has garnered significant community discussion with 10 mentions, indicating notable attention from security researchers.