A missing authorization vulnerability exists in Crocoblock JetEngine up to version 3.9.0.1. This flaw allows attackers with limited privileges to exploit incorrectly configured access control security levels, potentially leading to unauthorized data disclosure. The vulnerability has a CVSS score of 6.5, indicating a medium severity level. No public exploits or patches are currently documented.