Broken Access Control happens when Users can perform actions outside of their intended permissions. They open the door to data leaks, privilege escalation, and full system compromise