Casdoor through 4.4.0 contains an authorization bypass vulnerability in the /api/mcp endpoint that allows attackers with any application's clientId and clientSecret to gain unrestricted access to user administration across all organizations. Attackers can enumerate user records including password salts and email addresses, create administrator accounts, modify existing users, and delete them in any organization by supplying legitimate credentials from a single application.

Casdoor versions through 4.4.0 contain a critical authorization bypass vulnerability in the /api/mcp endpoint. Attackers possessing any application's clientId and clientSecret can gain unrestricted access to user administration across all organizations. The flaw allows enumeration of user records including sensitive data such as password salts and email addresses. Malicious actors can create administrator accounts, modify existing users, and delete users in any organization. The vulnerability stems from improper authorization checks in the MCP endpoint routing logic. Legitimate credentials from a single application are sufficient to exploit the vulnerability across all tenants. The issue is documented in the authz.go and base.go source files of the Casdoor repository. Multiple references including a proof-of-concept and VulnCheck advisory confirm the severity of this finding.