This vulnerability (CVE-2024-32808) in Metagauss ProfileGrid is classified as CWE-639, which involves authorization bypass through a user-controlled key. The issue affects ProfileGrid versions up to 5.7.9. The CVSS 3.1 base score is 5.4 (medium severity) with network attack vector, low attack complexity, requiring low privileges and no user interaction. The impact includes limited integrity and availability loss but no confidentiality impact. No patch or official remediation level has been disclosed by the vendor as of the publication date.

The vulnerability allows an attacker with low privileges to bypass authorization controls by manipulating a user-controlled key, potentially leading to limited integrity and availability impacts within the affected ProfileGrid application. There is no indication of confidentiality compromise. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation has been published, users should monitor vendor communications for updates. Until a patch is available, consider restricting access to the affected ProfileGrid instances and reviewing user permissions to minimize risk.