Critical SQL injection vulnerability in authentication system allowing complete authentication bypass. Impact: Unauthorized admin access, potential data breach, system compromise. Remediation: Use parameterized queries instead of string concatenation.