A technician can read any file located in the GLPI_DOC_DIR directory when running GLPI versions starting at 0.50 and up to but not including 10.0.25 and 11.0.7, allowing disclosure of potentially sensitive data. This is a direct result of an authorization bypass flaw (CWE‑862).

The vulnerability affects the GLPI asset and IT management software from the GLPI Project. All releases from version 0.50 through 10.0.24 and 11.0.6 are impacted; the issue was remedied in 10.0.25 and 11.0.7.

The CVSS score of 5.9 indicates moderate risk. The EPSS score is not available and the vulnerability is not listed in CISA's KEV catalog. The likely attack vector is via the GLPI web interface, where a user with a technician role can trigger the file read functionality; exploitation requires authenticated access but does not require elevated privileges outside the GLPI application.