The vulnerability is an insecure direct object reference in the get_model method of the ModelFilesController. Because the code uses Model.find_param(params[:model_id]) without wrapping the call in a policy scope, the authorization layer is bypassed. An attacker who has legitimate credentials with read permissions can request the URL that loads a model by ID and retrieve the contents of any model in the system, regardless of ownership. This leak of proprietary or sensitive 3D designs could lead to data confidentiality loss and potential intellectual property theft.

Any installation of Manyfold 0.133.0 or earlier that has not applied the 0.133.1 release. The affected component is the ModelFilesController in the open‑source Manyfold web application, which is typically deployed as a self‑hosted Ruby on Rails service. Users who have access to the web interface and an authenticated session are able to trigger the vulnerability.

The CVSS score of 5.3 categorizes this as a moderate severity flaw. The EPSS score of less than 1% suggests that, while exploitation is unlikely at large scale, the presence of an authenticated user that can supply arbitrary IDs makes the attack feasible without additional reconnaissance. The vulnerability is not yet listed in the CISA KEV catalog, so no known active exploits are reported, but the lack of a policy scope is a direct authorization bypass. The likely attack vector is a remote attacker with valid credentials who submits a crafted request to the get_model endpoint, forcing retrieval of unauthorized models.