This vulnerability (CVE-2025-14101) in PaperWork software by GG Soft Software Services Inc. is classified as CWE-639: Authorization Bypass Through User-Controlled Key. It allows an attacker with some level of privileges (PR:L) to bypass authorization controls by manipulating trusted identifiers, potentially gaining unauthorized access to sensitive information or functionality. The affected versions are from 5.2.0.9427 up to but not including version 6.0. The CVSS 3.1 vector indicates network attack vector, low attack complexity, privileges required, no user interaction, unchanged scope, high confidentiality impact, low integrity impact, and no availability impact.

Successful exploitation could lead to unauthorized disclosure of sensitive information due to bypassing authorization controls. Integrity impact is low, and availability is not affected. The vulnerability requires an attacker to have some privileges on the system but no user interaction is needed. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, it is recommended to monitor the vendor's communications for updates. Until a fix is available, limit privileges to trusted users and review access controls to reduce risk.