This vulnerability stems from an improper access control check within MIA Technology Inc.'s Pizzy Library, allowing an attacker to bypass authentication requirements and access protected functions or data. The flaw arises when the library incorrectly handles security level configurations, leading to missing authorization checks. As a result, an adversary who can influence or trigger vulnerable code can retrieve sensitive information or perform actions without proper privileges, compromising confidentiality and integrity.

The affected product is MIA Technology Inc.'s Pizzy Library in all releases from version 1.0.0.26250 up to, but not including, 1.3.9.26250. Systems that integrate or embed any of these library versions are at risk. No other vendors or products are known to be affected.

The CVSS score of 7.1 classifies this issue as high severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, so public exploitation is not confirmed. Nonetheless, the flaw requires that input be accepted without proper authorization checks, which the library performs internally. An attacker with the ability to influence the library’s input path or configuration—such as through a web interface, API, or internal process—could potentially gain unauthorized access. The risk level remains high because the flaw directly enables the bypassing of authentication controls, though exploitable scenarios may require some configuration context.