Lappsec

A potential security issue has been identified that could be exploited locally to allow escalation of privilege.

The issue allows remote attackers to bypass authentication, potentially obtaining sensitive information, modifying the application, or executing arbitrary code as root. This is achieved via a specific "AV Report Scheduler" HTTP User-Agent header.