The vulnerability in Net::IP::LPM version 1.10 arises from improper validation of input types, specifically the handling of leading zeros in IP CIDR address strings. Leading zeros can indicate octal numbers, which may be misinterpreted by the software, leading to incorrect IP address parsing. This flaw can be exploited to bypass access control mechanisms that rely on IP address filtering, as the software may treat the same IP address differently depending on the notation used.

An attacker could exploit this vulnerability to bypass IP address-based access controls by using IP addresses with leading zeros. This could allow unauthorized access to systems or services protected by IP filtering rules implemented using Net::IP::LPM version 1.10. The impact is limited to confidentiality and integrity, with no direct impact on availability reported.

No official patch or fix is currently available for this vulnerability. Users should monitor the vendor's advisory channels for updates. Until a fix is released, consider implementing additional validation or normalization of IP addresses before they are processed by Net::IP::LPM to mitigate the risk of bypass. Avoid relying solely on IP address filtering for critical access control decisions.