User impersonation via trusted client-side password hashes

Authentication bypass in motionEye before 0.44.0 allows remote attackers with a known username and password hash to impersonate that user. The server trusts the client-controlled meye_username and meye_password_hash cookies without validating a server-side session, including cookies loaded through the blank-credential switch-user flow. Exploitation requires the target user's hash; a local shell user can read the administrator hash from the globally readable default configuration, enabling account changes and camera-data access or deletion.