This vulnerability, identified as CVE-2026-39595, is a broken access control issue (CWE-862) in BoldGrid's W3 Total Cache plugin versions up to 2.9.1. It allows users with high privileges to bypass authorization controls, potentially leading to limited confidentiality, integrity, and availability impacts. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, and low impacts on confidentiality, integrity, and availability. No patch or official remediation level has been published by the vendor, and no exploits are known in the wild.

The vulnerability could allow an attacker with high privileges to perform unauthorized actions due to missing authorization checks. The impact is limited to low confidentiality, integrity, and availability losses, as reflected by the CVSS score of 4.7. Since the scope is unchanged, the vulnerability affects only the vulnerable component without extending to other components.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently documented, users should monitor vendor communications for updates. Until a patch is available, restrict access to users with high privileges and review permissions carefully to minimize risk.