This vulnerability in BoldGrid Help Scout arises from missing authorization checks, allowing attackers to bypass intended access control restrictions. The issue affects versions up to and including 6.5.6. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity, no privileges required, and requiring user interaction. The impact is limited to integrity, with no confidentiality or availability impact reported. No vendor advisory or patch information is available at this time.

Exploitation of this vulnerability could allow an attacker to perform unauthorized actions that alter data or system state (integrity impact) without compromising confidentiality or availability. Since no known exploits are in the wild, the immediate risk appears limited. However, the lack of authorization checks represents a security weakness that could be leveraged if combined with other attack vectors.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations where possible to limit exposure. Monitor vendor communications for updates regarding patches or official mitigations.