This vulnerability in Menulux Software Inc.'s Mobile App (versions before 9.5.8) is an authorization bypass caused by improper handling of user-controlled keys, allowing exploitation of trusted identifiers (CWE-639). The flaw enables an attacker to bypass authorization controls remotely without privileges or user interaction, potentially gaining unauthorized access to sensitive functions or data. The CVSS 3.1 base score is 7.5, reflecting high impact on confidentiality but no impact on integrity or availability. No patch or official remediation guidance has been published yet.

The vulnerability allows unauthorized remote attackers to bypass authorization mechanisms, potentially exposing sensitive information or functionality within the affected mobile app. The impact is limited to confidentiality as per the CVSS vector. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when using affected versions of the Menulux Mobile App. Monitor vendor communications for updates on patches or mitigations.