Unpatched critical bugs in Versa Concerto lead to auth bypass, RCE

ProjectDiscovery disclosed three vulnerabilities in Versa Concerto — two critical flaws enabling authentication bypass and remote code execution (including an ld.so.preload RCE) and a high-severity Docker host write issue allowing full host compromise — provided PoCs and mitigation advice, and published details after a 90-day disclosure period; Versa later stated hotfixes and a GA release were made available and no exploitation was observed.