An issue in Semantic machines v5.4.8 allows attackers to bypass authentication via sending a crafted HTTP request to various API endpoints.

A security vulnerability in Semantic machines version 5.4.8 allows attackers to bypass authentication mechanisms by sending specially crafted HTTP requests to various API endpoints. This authentication bypass vulnerability could allow unauthorized access to protected resources and API functionality. The vulnerability has been assigned CVE-2025-66698 and affects the specific version 5.4.8 of the Semantic machines software. Proof of concept code appears to be available on GitHub, indicating potential for exploitation.