Users are able to access the admin dashboard without proper authorization. This poses a security risk as unauthorized users may manipulate sensitive data.