This vulnerability in Xelion Webchat versions up to 9.1.0 involves incorrect privilege assignment that enables privilege escalation. An attacker with some level of access could leverage this flaw to gain higher privileges than intended, impacting confidentiality, integrity, and availability. The CVSS 3.1 vector indicates network attack vector, low attack complexity, privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation could allow an attacker with limited privileges to escalate their privileges, potentially leading to full system compromise including unauthorized access to sensitive data, modification of system resources, and disruption of service. The high CVSS score reflects the critical nature of the impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should restrict access to trusted personnel only and monitor for unusual privilege escalations. No vendor advisory or patch links are currently available.