The vulnerability exists in the Parse Dashboard AI Agent API endpoint where no authorization check is performed for POST /apps/:appId/agent. Authenticated users can manipulate the URL to access another app’s agent endpoint, and read‑only users are given the full master key instead of a reduced key. This allows them to send requests with write permissions, enabling data modification and deletion across apps. The weakness is a classic Authorization Bypass, mapped to CWE‑862.

Affected products are Parse Dashboard versions 7.3.0‑alpha.42 through 9.0.0‑alpha.7. Only instances with an agent configuration enabled are vulnerable. The product is distributed by parse-community under the name parse-dashboard. Any deployment of these versions without upgrading or removing the agent configuration is impacted.

The CVSS vector scores the flaw as 9.3, indicating high severity. The EPSS is below 1%, reflecting a very low but non‑zero probability of exploitation in the wild, and it is not currently listed in CISA’s KEV catalog. The flaw is exploitable via the public network because the vulnerable endpoint is reachable over HTTPS. An attacker who can authenticate to a single app can gain access to other apps’ data and master keys, compromising confidentiality, integrity, and availability of all applications served by the dashboard.