Summary

The Payment Orchestrator service in Adobe Commerce may allow an attacker to gain higher permissions than intended, potentially leading to unauthorized access to sensitive data or system compromise. This vulnerability is present in Adobe Commerce installations and requires immediate attention to prevent potential data breaches or system takeover. Users are advised to review and update their Adobe Commerce configurations as soon as possible.