A vulnerability in the REST Data Panache component of Quarkus allows an authenticated user to infer sensitive data values by exploiting a failure to enforce security constraints on entity properties when those constraints are applied via the @SecureField annotation on getter methods. This flaw affects filtering and sorting operations in generated REST resources, potentially exposing confidential information despite the values being omitted from the response.