This vulnerability affects SourceCodester Inventory Management System 1.0 in the User Registration Endpoint component. The issue is due to improper access controls caused by manipulation of the 'role' parameter in /api/users_handler.php. This flaw allows remote attackers to potentially escalate privileges or perform unauthorized actions by exploiting the access control weakness. The vulnerability has a CVSS 4.0 base score of 6.9, indicating medium severity. No official fix or patch has been published by the vendor as of the current data.

The vulnerability allows remote attackers to bypass access controls by manipulating the 'role' argument in the user registration API endpoint. This could lead to unauthorized privilege escalation or unauthorized access to restricted functionality within the Inventory Management System. Although exploit code is publicly available, there are no confirmed reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected endpoint where possible or implementing additional access control checks at the network or application level to mitigate exploitation risk.