The vulnerability stems from missing authorization checks for the ALTERTABLE_OWNER operation in the checkPrivileges method. The commit diff shows the addition of an else-if branch specifically for ALTERTABLE_OWNER, which constructs an access request requiring ALTER permission. Prior to this fix, the absence of this handling allowed users with only SELECT privileges to perform ownership changes, violating proper permission assignment. The targeted patch and CVE description confirm this was the root cause.