Vendor
Firekylin versions 2.18.1 and earlier contain an improper authorization flaw in the admin API that allows editor-role users to access sensitive administrative secrets and perform unauthorized actions.