An ACL bypass exists in the AppRole, Cert, LDAP, and RADIUS authentication methods due to implicit path canonicalization. Path canonicalization is the process of converting a file path or URL into a standard, unique representation. Authenticated attackers can request non-canonical paths for AppRole Role IDs, Cert CRLs, LDAP groups and users, or RADIUS users to evade ACL deny rules.