What steps does it take to reproduce the issue?
When a file is only in one of the indexed versions (draft, last released), Dataverse currently creates a permissions doc in solr for the file for both versions. This results in an orphaned permission doc that can be detected via /api/admin/index/status and removed via /api/admin/index/clear-orphans but will otherwise remain in solr (reindexing only removes permissions docs that should be there).

Which version of Dataverse are you using?
6.5/develop - probably a long-standing bug

Are you thinking about creating a pull request for this issue? PR tbd