CVE-2024-25092 is a missing authorization vulnerability (CWE-862) in XLPlugins NextMove Lite, versions up to 2.17.0. The vulnerability allows an attacker with network access and low privileges to bypass authorization controls, resulting in high impact on confidentiality, integrity, and availability. The CVSS 3.1 base score is 8.8, reflecting network attack vector, low attack complexity, no user interaction, and high impact on all security properties. No patch or official remediation level has been disclosed by the vendor.

Successful exploitation of this vulnerability can lead to unauthorized access and control over the affected system, compromising sensitive data and potentially disrupting service availability. The high CVSS score indicates a serious risk to affected environments. However, no known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the affected application and monitor for suspicious activity related to authorization bypass attempts. Avoid granting unnecessary privileges to users interacting with NextMove Lite.