The yellowkey vulnerability might be a backdoor. NightmareEclipse even speculated so in their publication.

This is one of the most insane discoveries I ever found, almost feels like backdoor but what do you know, maybe I’m just insane.