Automated 0-day attack: fair point.

Though direct remote code execution is probably much, much more likely than authentication bypass.