Unauthenticated Access Vulnerability in Clauster Dashboard
A critical vulnerability in Clauster, a dashboard and API management tool, allows unauthenticated access to its entire dashboard and API when deployed on non-loopback addresses and authentication is not properly enabled. This affects all released versions up to 0.2.1. An attacker with network access can gain full control, enabling remote code execution in project directories. Immediate action is required to set auth.enabled to true or bind to loopback addresses with secure access controls.