A security researcher has revealed that the maintainers of the Xray-core proxy software concealed a certificate verification bypass vulnerability, contradicting their public criticism of similar features in competing tools. This undisclosed flaw potentially exposes users to significant security risks by allowing insecure network connections.