A critical SQL injection vulnerability in OTRS and OTRS Community Edition database layer allows unauthenticated attackers to bypass authentication. The vulnerability affects multiple OTRS versions from 6.0.x through 2026.x and requires MySQL/MariaDB to be configured with NO_BACKSLASH_ESCAPES SQL mode. The flaw stems from improper input validation in the database layer module. Products based on OTRS Community Edition are also likely affected. This represents a significant security risk as it allows complete authentication bypass without any user credentials.