This vulnerability in Backup and Move arises from missing authorization checks due to incorrectly configured access control. It affects versions up to 0.1 and allows an attacker with low privileges to access sensitive information without user interaction. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, and no impact on integrity or availability.

An attacker with low privileges can exploit this vulnerability remotely to gain unauthorized access to sensitive data, impacting confidentiality. There is no impact on integrity or availability. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, restrict access to the affected Backup and Move versions and review access control configurations to minimize exposure.