A flaw in the permission handling of kvf-admin v1.0.0, specifically within the UserController component, enables a remote attacker to gain higher level privileges. The vulnerability is an insecure permissions issue that allows bypassing normal access controls. Once exploited, the attacker can perform any action granted to privileged users, potentially leading to full system compromise.

The reported vulnerability affects the kvf-admin application, version 1.0.0. No other vendors or product variants are listed in the available data.

EPSS score < 1% and the vulnerability is not currently listed in the CISA KEV catalog. The CVSS score is 8.8, indicating a high severity level. The attack vector is inferred to be remote, likely via the web interface of UserController. Exploitation requires the attacker to interact with the vulnerable component, but no additional prerequisites are mentioned. Given the high potential impact and the lack of publicly known mitigations, the risk to affected installations is considered significant.