This vulnerability in FAPI Member arises from improperly configured access control mechanisms that rely on a user-controlled key, enabling an attacker to bypass authorization controls. The issue affects all versions up to and including 2.2.30. The CVSS 3.1 base score of 5.3 reflects a network attack vector with low attack complexity, no privileges required, no user interaction, and impact limited to partial confidentiality loss. No official patch or remediation details are provided in the available data.

Successful exploitation could allow an attacker to bypass authorization controls and gain unauthorized access to data or functionality that should be restricted. The impact is limited to confidentiality loss; integrity and availability are not affected. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and strengthen access control configurations to ensure keys or tokens controlling authorization cannot be manipulated by users. Monitor vendor communications for updates and apply patches promptly once released.