This vulnerability (CVE-2026-6008) in DijiDemi involves an authorization bypass caused by a user-controlled key, classified under CWE-639 (Authorization Bypass Through User-Controlled Key). It allows an attacker with some level of privileges to abuse those privileges by bypassing authorization controls. The affected versions are from v4.5.12.1 before v4.5.13.0. The CVSS 3.1 base score is 6.8, reflecting network attack vector, low attack complexity, required privileges at high level, user interaction required, and high impact on confidentiality, integrity, and availability. No patch or official remediation has been documented yet.

Successful exploitation of this vulnerability could allow an attacker with existing privileges to bypass authorization controls and perform actions beyond their intended permissions, potentially leading to full compromise of confidentiality, integrity, and availability of the affected system. However, exploitation requires user interaction and high privileges, which limits the attack surface. There are no known active exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should carefully review and restrict user privileges to minimize potential abuse. Monitor for unusual privilege escalations or unauthorized actions by users with high privileges.