CVE-2025-23477 describes a Missing Authorization vulnerability in the Realty Workstation product by realtyworkstation affecting versions up to 1.0.45. The issue arises because certain functionality is accessible without proper ACL enforcement, allowing unauthorized users to perform actions that should be restricted. The CVSS 3.1 vector indicates the vulnerability is remotely exploitable without privileges or user interaction, with no confidentiality impact but high integrity impact and low availability impact.

The vulnerability allows unauthorized users to access and potentially modify functionality or data within Realty Workstation that should be protected by access controls. This can lead to unauthorized changes (high integrity impact) and limited disruption of service (low availability impact). There is no confidentiality impact reported. No known exploits are currently active in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, restricting network access to the affected versions and applying compensating controls to limit unauthorized access may help mitigate risk.