This vulnerability in Ovic Addon Toolkit (up to version 2.6.1) involves missing authorization checks, allowing users with limited privileges to perform actions that should require higher authorization. The CVSS 3.1 base score is 4.3 (medium), with network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, and impacts only availability. No vendor advisory or patch information is currently available.

The vulnerability could allow an attacker with some level of privileges to perform unauthorized actions that may degrade availability of the affected system. There is no impact on confidentiality or integrity reported. No known exploits exist in the wild, indicating limited current risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to trusted users only and monitor for unusual activity related to authorization bypass attempts. Avoid granting unnecessary privileges to users of the Ovic Addon Toolkit.