This vulnerability (CVE-2024-25935) in Metagauss RegistrationMagic is classified as CWE-862 (Missing Authorization). It affects versions through 5.2.5.9 and allows an attacker with some privileges to bypass authorization controls, potentially leading to unauthorized modification of data or actions within the application. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity, requiring privileges, no user interaction, and resulting in integrity impact only. No known exploits are reported in the wild, and no patch or official fix has been disclosed.

The vulnerability could allow an attacker with limited privileges to perform unauthorized actions that affect data integrity within the RegistrationMagic product. There is no impact on confidentiality or availability according to the CVSS vector. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is provided, users should monitor vendor communications for updates. Until a patch is available, restrict access to trusted users and review permissions carefully to minimize risk.