This vulnerability in Bricks Builder (<=2.1.4) is a broken access control issue where subscriber roles lack proper authorization checks. The weakness is categorized as CWE-862, indicating missing authorization mechanisms that could lead to privilege escalation or unauthorized operations. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity, requiring low privileges, no user interaction, and resulting in limited integrity impact without confidentiality or availability impact. There is no vendor advisory or patch information available at this time, and no known exploits have been reported in the wild.

The vulnerability allows users with subscriber-level privileges to bypass authorization controls, potentially enabling unauthorized modification of data or settings within Bricks Builder. The impact is limited to integrity, with no direct confidentiality or availability consequences reported. The medium CVSS score reflects the moderate risk posed by this issue.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict subscriber permissions where possible and monitor for unusual activity related to privilege misuse. Avoid granting subscriber roles unnecessary access to sensitive features in Bricks Builder.