Metadot versions 6.4.4 and below suffer from a stale variable issue that allows users to gain administrative privileges.