This vulnerability, identified as CVE-2026-78272, affects Fluent Support Pro versions up to and including 2.3.1. It is a broken access control issue where subscriber-level users can bypass authorization checks, potentially allowing them to access or perform actions beyond their intended permissions. The CVSS 3.1 base score is 5.4 (medium), reflecting a network attack vector with low complexity and no user interaction required, impacting confidentiality and integrity but not availability. No known exploits are reported in the wild, and no vendor advisory or patch information is currently available.

The vulnerability allows subscriber-level users to bypass authorization controls, which could lead to unauthorized access to certain data or functionality within Fluent Support Pro. The impact is limited to confidentiality and integrity, with no reported impact on availability. The medium CVSS score reflects a moderate risk level.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting subscriber permissions or limiting plugin usage to trusted users. Monitor for vendor updates regarding patches or official mitigations.