This vulnerability (CVE-2025-8884) in ACE Center allows an attacker with low privileges and local access to bypass authorization controls by manipulating user-controlled keys. This leads to privilege abuse and exploitation of trusted identifiers, potentially granting unauthorized access to sensitive functions or data. The issue affects versions from 3.10.100.1768 before 3.10.161.2255. The CVSS vector indicates the attack requires low complexity, low privileges, no user interaction, and impacts confidentiality but not integrity or availability.

Successful exploitation can result in unauthorized access to sensitive information due to confidentiality impact, without affecting system integrity or availability. The medium severity score reflects the limited attack vector (local access with low privileges) and the absence of known exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround information is provided, users should monitor vendor communications for updates and avoid using affected versions if possible.