This vulnerability in Fluent Support involves missing authorization checks due to misconfigured access control, which could allow unauthorized users to perform actions that alter data or system state. It affects all versions up to 1.8.0. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity and no privileges or user interaction required, impacting integrity but not confidentiality or availability. No vendor advisory or patch information is currently available, and the product is not a cloud service, so remediation depends on vendor updates.

The vulnerability allows unauthorized users to exploit incorrect access control configurations, potentially leading to unauthorized modification of data or system settings (integrity impact). There is no impact on confidentiality or availability reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should review and tighten access control configurations where possible to limit unauthorized access. Monitor vendor channels for updates and apply patches promptly once available.