This vulnerability, identified as CWE-266 (Incorrect Privilege Assignment), affects Dokan versions up to 5.0.2. It enables privilege escalation where a user with limited privileges can escalate their rights, potentially leading to full control over the affected system. The CVSS 3.1 base score is 8.8, indicating a high impact on confidentiality, integrity, and availability. The vulnerability is network exploitable with low attack complexity and does not require user interaction. No known exploits are reported in the wild, and no official fix or patch has been announced by the vendor as of the publication date.

Successful exploitation could allow an attacker with limited privileges to escalate their privileges to a higher level, potentially gaining full control over the system. This impacts confidentiality, integrity, and availability of the affected system. The vulnerability is remotely exploitable with low complexity and no user interaction required.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently available, monitor vendor communications for updates. Until a patch is released, restrict access to vulnerable versions and limit user privileges where possible.