The vulnerability CVE-2024-50506 in azexo Marketing Automation by AZEXO is due to incorrect privilege assignment, which enables privilege escalation. This affects versions up to 1.27.80 and allows an attacker with some level of access to gain higher privileges without user interaction. The CVSS 3.1 base score is 8.8, indicating a high impact on confidentiality, integrity, and availability. No vendor advisory or patch links are currently available, and the product is self-hosted rather than cloud-based.

Successful exploitation of this vulnerability can lead to privilege escalation, granting an attacker higher-level access than intended. This can result in full compromise of the affected system's confidentiality, integrity, and availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected system to trusted users only and monitor for suspicious privilege changes. Avoid granting unnecessary privileges to users as a temporary mitigation.