Wolf CMS versions up to 0.8.3.1 contain an authorization bypass flaw in the BackupRestoreController. A PHP operator precedence error in the permission check expression causes the system to incorrectly evaluate access control for backup operations. When exploited, authenticated users who are not administrators can create, download, and restore backups, effectively gaining unauthorized access to sensitive site data and configuration. The weakness is classified as CWE-697: Implicit Type Conversion Vulnerability.

This vulnerability affects the Wolf CMS product, specifically releases 0.8.3.1 and earlier. The affected components are the BackupRestoreController module responsible for backup handling. Administrators who have not applied a patch or an updated release are at risk if any authenticated user can log in via the public interface.

The CVSS score of 8.7 indicates a high severity issue, and the EPSS score is < 1%, suggesting a low but non-zero probability of exploitation. Because the flaw can be triggered by any logged-in user lacking admin privileges, the attack vector is inferred to be local authenticated. Exploitation does not require additional network-facing vectors or user interaction beyond normal site usage. Consequently, the risk remains significant for sites with exposed backup functionality, and prompt remediation is warranted.