This vulnerability in Fluent Support arises from missing authorization checks, which leads to incorrect access control enforcement. Specifically, the product versions up to 1.10.4 do not properly restrict access to certain functions or data, allowing users with limited privileges to access information they should not. The CVSS vector indicates the attack can be performed remotely over the network with low complexity and requires low privileges but no user interaction. The impact is primarily on confidentiality, with no integrity or availability impact reported.

Successful exploitation can lead to unauthorized disclosure of sensitive information within the Fluent Support system. There is no reported impact on data integrity or system availability. The vulnerability requires an attacker to have some level of privileges but no user interaction is needed to exploit it remotely.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. In the meantime, review and tighten access control configurations where possible to limit exposure.