This vulnerability in the Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT) All in One is due to missing authorization checks, which results in incorrect access control. Versions up to 2.1.2 are affected. The CVSS score of 7.5 reflects a network attack vector with low attack complexity, no privileges required, and no user interaction needed. The impact is limited to availability, with no confidentiality or integrity impact reported. No patch or vendor advisory has been provided to date.

The vulnerability allows an attacker to exploit missing authorization controls, potentially causing denial of service or disruption of availability of the affected software. There is no indication of confidentiality or integrity compromise. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix has been provided, users should monitor vendor communications for updates. Until a fix is available, restrict access to the affected software to trusted users and environments to reduce exposure.