This vulnerability (CVE-2026-104403) in ThimPress LearnPress involves an authorization bypass caused by user-controlled keys, classified under CWE-639 (Authorization Bypass Through User-Controlled Key). It allows attackers to exploit incorrectly configured access control security levels. The affected product versions include LearnPress up to 4.4.9. The CVSS 3.1 base score is 5.3, indicating a medium severity with network attack vector, low attack complexity, no privileges required, no user interaction, and limited confidentiality impact. There is no information on available patches or vendor advisories.

The vulnerability enables unauthorized users to bypass access controls, potentially allowing them to access restricted functionality or data. The impact is limited to confidentiality loss without integrity or availability effects. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, monitor vendor communications for updates. No specific mitigation steps are provided.