Security researchers have responsibly disclosed a critical authentication bypass vulnerability affecting a major Saudi banking application used by millions. The bank has deployed an emergency patch and SAMA has been notified. No evidence of exploitation in the wild has been found.