This vulnerability in Akinsoft LimonDesk arises from improper origin validation (CWE-346), which permits forceful browsing attacks. Affected versions include s1.02.14 up to but not including v1.02.17. The CVSS 3.1 base score is 7.3, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and impacts on confidentiality, integrity, and availability. No vendor advisory or patch information is provided, and the product is not a cloud service, so remediation responsibility lies with the user.

Successful exploitation could allow an attacker to bypass origin checks and perform forceful browsing, potentially accessing unauthorized information or functions. The CVSS score indicates partial impact on confidentiality, integrity, and availability. However, no known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates and consider restricting access controls or implementing compensating controls to limit unauthorized browsing where possible.