SOPlanning fails to enforce authorization for backup endpoints, allowing an unauthenticated user to request backup archives from the server. These archives contain user databases with usernames and password hashes, as well as a config.csv file that holds additional sensitive information. The breach exposes credential data and operational secrets, effectively compromising the confidentiality of the entire system.

The vulnerability impacts the SOPlanning product, specifically all releases version 1.55 and earlier. Users running these affected versions are susceptible to the exploitation described above.

The CVSS score of 8.8 marks this flaw as high severity, and while there is no EPSS score available, it remains a high-risk issue due to its lack of authorization checks. The vulnerability is not listed in CISA KEV, but its exploitation is straightforward: an attacker only needs network access to the backup endpoints and no credentials. The likely attack vector is remote network-based, as the endpoints are exposed over HTTP/HTTPS and no authentication is required.