The vulnerability arises because Yuxi versions before 0.6.2 accept any Administrator JWT in the Authorization header without validating the identity token’s issuer or instance. This weakness is a CWE‑287 Authentication Bypass. An attacker who obtains or constructs a valid token from another deployment can replay it against a different instance, directly bypassing login and acquiring full administrative privileges. Consequently, the attacker can modify configuration, create new admin accounts, or otherwise take total control of the backend interface.

The flaw affects the Yuxi knowledge‑base platform prior to version 0.6.2. Only deployments of Yuxi that have not applied the 0.6.2 update are vulnerable. The CVE does not list other products; thus any instance running an affected release is at risk.

The CVSS score of 9.4 reflects the high impact and remote nature of the exploit. Because an attacker only needs to craft a valid JWT, the EPSS score is not published, but the vulnerability is broadly exploitable over the public network. It is not currently listed in the CISA KEV catalog, but the severity and ease of exploitation make immediate remediation critical. An attacker with network access can send an HTTP request containing the replayed token to the management API and gain full control of the instance.