This vulnerability in AxOnboard allows an attacker with limited privileges to bypass authorization controls by manipulating user-controlled keys that are trusted by the system. This flaw enables unauthorized actions or access by exploiting the way trusted identifiers are handled. The issue affects versions 3.2.0 up to but not including 3.3.0. The CVSS 3.1 score is 7.6, reflecting high severity with network attack vector, low attack complexity, requiring privileges but no user interaction, and impacts confidentiality, integrity, and availability to varying degrees.

Successful exploitation could lead to unauthorized access or actions within the AxOnboard system, impacting data integrity and confidentiality, and causing limited availability disruption. The attacker requires some level of privileges but no user interaction is needed. There are no reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix is currently documented, users should monitor vendor communications for updates. Until a fix is available, restrict access to affected versions and review authorization configurations to limit exposure.