This vulnerability (CWE-862) in Sonaar Music MP3 Audio Player for Music, Radio & Podcast allows an attacker with low privileges to bypass authorization controls. The CVSS 3.1 score of 7.6 reflects network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, limited confidentiality impact, high integrity impact, and low availability impact. The affected product versions include all versions up to 5.1. No vendor advisory or patch information is currently available.

An attacker with low privileges can exploit this missing authorization flaw to perform unauthorized actions that could alter data or functionality within the affected plugin, impacting integrity significantly and availability to a lesser extent. Confidentiality impact is limited. There are no reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected plugin to trusted users only and monitor for unusual activity related to authorization bypass attempts.