Lara Dashboard before 1.3.0 contains an authentication bypass vulnerability in the screenshot-login route that allows unauthenticated attackers to authenticate as any user by email when APP_ENV is not production. Attackers can request the GET /screenshot-login/{email} endpoint with a registered email address to receive a fully authenticated session, enabling access to user administration, settings, database contents, and arbitrary code execution through the module installer.

Lara Dashboard versions before 1.3.0 contain a critical authentication bypass vulnerability in the screenshot-login route. Unauthenticated attackers can exploit the GET /screenshot-login/{email} endpoint to authenticate as any registered user by simply providing their email address. This vulnerability is only present when the APP_ENV environment variable is not set to production. Successful exploitation grants a fully authenticated session, enabling access to user administration, application settings, and database contents. The vulnerability also enables arbitrary code execution through the application's module installer feature. The flaw exists in the ScreenshotGeneratorLoginController.php file. A fix was introduced in version 1.3.0, and a GitHub security advisory has been published. Organizations running Lara Dashboard in non-production environments or misconfigured production deployments are at significant risk.