ajenti.plugin.core has race conditions in 2FA
If the 2FA was activated, it was possible during a short moment after the authentication of an user to bypass its authentication.
Advisories for Pypi/Ajenti.plugin.core package
2026
ajenti.plugin.core has password bypass when 2FA is activated
If the 2FA was activated, it was possible to bypass the password authentication