Inventec Appliances' Chiline Cloud suffers from an authorization bypass vulnerability classified as CWE-639 (Authorization Bypass Through User-Controlled Key). This flaw enables unauthenticated remote attackers to modify a parameter to read sensitive information of other users without proper authorization checks. The vulnerability is publicly disclosed with a CVSS 3.1 base score of 7.5, indicating high impact on confidentiality. No vendor advisory or patch information is currently available, and the affected versions have not been specified.

The vulnerability allows unauthorized disclosure of sensitive user data by bypassing authorization controls. This compromises user confidentiality but does not affect integrity or availability. Since the attack requires no authentication and has low attack complexity, it poses a significant risk to user privacy within the affected service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected parameter where possible and monitor for suspicious access patterns. Follow Inventec Appliances' updates for any forthcoming patches or mitigation instructions.