This vulnerability (CVE-2024-32772) in Metagauss ProfileGrid is classified under CWE-639 (Authorization Bypass Through User-Controlled Key). It allows an attacker with some level of privileges (PR:L) to bypass authorization controls by manipulating user-controlled keys. The attack vector is network-based with low attack complexity and does not require user interaction. The impact is limited to partial confidentiality loss without affecting integrity or availability. No official fix or patch has been published as of the current data.

The vulnerability could allow an attacker with limited privileges to bypass authorization controls, potentially exposing some confidential information. There is no impact on data integrity or system availability. The overall impact is considered medium severity due to the limited confidentiality impact and the requirement for some privileges to exploit.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is currently available, users should monitor Metagauss advisories for updates. Until a patch is released, consider restricting access to trusted users and reviewing authorization configurations to minimize exposure.