This vulnerability (CVE-2025-10912) in TemizlikYolda involves an authorization bypass through user-controlled keys, classified under CWE-639. It enables attackers with limited privileges to manipulate variables they control to bypass authorization checks, potentially leading to limited integrity and availability impacts. The issue affects the product versions up to 11022026. The vendor has not provided any response or patch information. The CVSS 3.1 base score is 5.4 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L), reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, but limited integrity and availability impacts.

The vulnerability allows an attacker with low privileges to bypass authorization controls by manipulating user-controlled keys, which can lead to limited integrity and availability impacts on the affected system. There is no confidentiality impact reported. No known exploits are currently in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch or workaround is available, users should monitor official channels for updates. Until a fix is provided, restricting access to trusted users and minimizing exposure of the affected system may reduce risk.