An Access Control vunerabiity exists in Gerapy v 0.9.7 via the spider parameter in project_configure function.
gerapy