Passwordstate dev urges users to patch auth bypass vulnerability

Click Studios released Passwordstate 9.9 Build 9972 to fix a high-severity authentication bypass that can let an attacker use a crafted URL on the Emergency Access page to access the administration section; a partial workaround (restricting Emergency Access allowed IPs) is available but upgrading is strongly recommended. The report also recalls a 2021 supply-chain compromise that distributed the Moserpass infostealer and may have resulted in harvested password records.