QNAP Media Streaming Add-on before 500.1.1.6 is vulnerable to an authorization bypass through user-controlled key vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow local network attackers to gain privilege.