This vulnerability in Media LIbrary Assistant involves an authorization bypass caused by improper access control configuration. Specifically, a user can manipulate a key under their control to bypass authorization checks, potentially gaining access to restricted resources or operations. The affected versions include all releases up to and including 3.29. The CVSS v3.1 base score is 5.3, reflecting a network attack vector with low complexity and no privileges or user interaction required, impacting confidentiality but not integrity or availability.

An attacker can bypass authorization controls, potentially gaining unauthorized read access to data or functionality that should be restricted. The impact is limited to confidentiality loss; integrity and availability are not affected. There are no reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No temporary or official fixes are currently documented.