This vulnerability in Django's GenericInlineModelAdmin component allows attackers to bypass permission checks on inline model instances by submitting forged POST requests. Affected versions include Django 6.0 prior to 6.0.4, 5.2 prior to 5.2.13, and 4.2 prior to 4.2.30. Earlier unsupported versions such as 5.0.x, 4.1.x, and 3.2.x might also be vulnerable but were not evaluated. The flaw is categorized under CWE-862 (Missing Authorization). There is no CVSS score or vendor advisory detailing remediation status at this time.

The vulnerability could allow unauthorized users to add inline model instances by bypassing permission checks, potentially leading to unauthorized data modification or creation within Django admin interfaces. The exact impact depends on the deployment context and the sensitivity of the affected models. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should monitor official Django project communications for updates and apply any forthcoming patches promptly. Until a fix is available, carefully review and restrict access to Django admin interfaces and consider additional application-level authorization controls.