Kanova Android App version 1.0.27 contains improper access control vulnerabilities that allow attackers to manipulate API request parameters to gain unauthorized access to user details and group information, including entry codes. This can lead to privacy breaches and unauthorized use of the platform.