A security vulnerability has been discovered in YunaiV yudao-cloud up to version 2026.01. The flaw affects the getAccessToken function in the OAuth2TokenServiceImpl.java file, leading to improper authentication. The vulnerability can be exploited remotely and public exploits are available. The vendor was contacted but did not respond to the disclosure.