Certain endpoints fail to enforce proper permission checks, leading to a missing authorization issue. This allows authenticated users with low privileges to request these endpoints and read personal data that exceeds the permissions granted by their assigned role.