Vincenzo Ciancaglini

The issue is related to a lack of mutual authentication, which allows an attacker to impersonate the server and obtain a long-lasting token.

A token-reuse issue allows an attacker to create new users, elevate existing users to administrators, delete users, and download user faces from the database.

The issue is related to a lack of authentication in network relays, allowing attackers to send packet data to UDP port 5000 and grant physical access to unauthorized individuals.