CVE-2024-25912 is a missing authorization vulnerability (CWE-862) in Skymoonlabs MoveTo versions up to 6.2. This vulnerability allows an attacker to bypass authorization controls, enabling unauthorized access and potentially full control over affected resources. The CVSS 3.1 base score is 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating that the vulnerability is exploitable remotely without authentication or user interaction, and can result in complete compromise of confidentiality, integrity, and availability. No patch or official remediation level has been published by the vendor as of the latest data.

Successful exploitation of this vulnerability can lead to unauthorized access and full compromise of the affected system's confidentiality, integrity, and availability. Given the lack of authorization checks, attackers can perform privileged actions remotely without authentication, posing a critical risk to affected deployments.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the MoveTo application to trusted users only and monitor for unusual activity. Avoid exposing the affected versions to untrusted networks.