This vulnerability in Mikado-Themes Dolcino (<= 1.6) involves an authorization bypass caused by improperly configured access control mechanisms. Specifically, user-controlled keys can be manipulated to circumvent authorization restrictions, potentially allowing an attacker with high privileges to perform unauthorized actions. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requiring high privileges, no user interaction, unchanged scope, and low impact on confidentiality and integrity, with no impact on availability.

The vulnerability could allow an attacker with high privileges to bypass authorization controls, leading to limited confidentiality and integrity impacts. There is no indication of availability impact or exploitation in the wild. The medium severity reflects the moderate risk posed by this issue.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Mikado-Themes communications for updates. Until a fix is available, restrict access to trusted users and review access control configurations carefully to minimize risk.