The vulnerability stems from incorrect privilege assignment in HYPR Server, allowing a user or process to elevate its privileges beyond intended boundaries. This flaw enables an adversary to gain higher-level access, potentially compromising confidentiality, integrity, and availability of the system. The weakness is identified as a failure of authorization controls.

HYPR, Server product, is affected for all releases from version 10.5.1 up to but not including 10.7. Users running any of these versions should verify their system against the vulnerability.

Commercial security ratings assign a CVSS score of 5.8, indicating moderate severity, and the EPSS score is unavailable. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is that an attacker with limited access to the server environment could exploit the privilege assignment flaw to elevate privileges. This inference is drawn from the mention of privilege escalation and lacks explicit details on the precise exploitation method.