The vulnerability CVE-2024-54369 in ThemeHunk Zita Site Builder arises from missing authorization checks in the ai-site-builder component, allowing unauthorized access to functionality that is not properly constrained by ACLs. Affected versions include all up to and including 1.0.2. The CVSS 3.1 base score is 9.1, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, and impacts limited to integrity and availability. No vendor patch or advisory is currently available, and the product is not a cloud service.

Exploitation of this vulnerability could allow an unauthenticated attacker to perform unauthorized actions within the Zita Site Builder, potentially leading to integrity and availability impacts. The lack of proper authorization controls means sensitive functions could be manipulated or disrupted by attackers. There are no confirmed exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the Zita Site Builder interface to trusted users and networks where possible. Monitor for updates from ThemeHunk regarding patches or official mitigations.