The root cause of Broken Object Level Authorization (BOLA) is inadequate or missing access control checks when a user requests access to an object. This lack of proper authorization validation allows unauthorized users to view or modify data.