The get_feed function within the admin.php component of HTMLy version 3.1.1 permits a remote attacker to escape the configured privilege level. This flaw allows an attacker to perform actions with elevated privileges on the host, potentially affecting confidentiality, integrity, or availability. The issue aligns with CWE-269, Improper Privilege Management.

Only installations of HTMLy version 3.1.1 that expose the admin.php component with the get_feed endpoint are affected. No other vendors or product versions are listed, and newer releases are not known to contain this issue.

The vulnerability enables a remote attacker to escape privilege via a crafted request to the get_feed endpoint exposed by the admin.php component. With a CVSS score of 9.8, the flaw is considered critical. The EPSS score of <1% indicates a very low but nonzero likelihood of exploitation, and the flaw is not listed in the CISA KEV catalog. Once the application is reachable from untrusted networks, an attacker can gain elevated privileges, but the overall risk of exploitation remains primarily driven by network exposure.