The vulnerability is an insecure direct object reference in Blinko's tRPC router. An authenticated attacker can supply arbitrary tag IDs to read and modify tags belonging to other users. The ability to enumerate IDs via endpoints such as fullTagNameById, updateTagIcon, and updateTagOrder can expose private note topics and allow tampering with tag icons and ordering. According to the CWE mapping, this is a classic IDOR flaw, which leads to data exposure and integrity compromise.

Blinkospace BlinkO version 1.8.8 on all platforms, as identified by the CNA.

The CVSS score of 5.3 indicates a moderate severity, and the vulnerability requires the attacker to be an authenticated user. The EPSS score is not available, and the vulnerability is not listed in CISA's KEV catalog, suggesting limited known exploitation events. Inferred attack path: an attacker authenticates with valid credentials, then manipulates the tag ID parameters to access or modify other users' tags. The lack of input validation allows sequential enumeration and abuse of the aforementioned endpoints.