Subscriber privilege escalation via undisclosed flaw

Privilege escalation in Theme-One Inc. The Grid 2.7.9.1 and earlier allows remote authenticated users to gain higher privileges via unspecified vectors. Patchstack's advisory and the published CVE record do not disclose the vulnerable endpoint, parameter, or function, so the flawed operation on untrusted input is not public. Exploitation requires a subscriber account and no user interaction; public sources state only that higher privileges can be gained, and they do not identify the final role or whether every exploit path reaches full site control.