The RiceTheme Felan Framework contains an authentication bypass vulnerability identified as CVE-2025-23504. This vulnerability allows an attacker to circumvent authentication controls by leveraging an alternate path or channel within the framework. It affects all versions up to 1.1.3. The CVSS 3.1 base score is 9.8, reflecting a network attack vector with no privileges or user interaction required, and complete compromise of confidentiality, integrity, and availability. No patch or official remediation information is currently available, and the framework is not a cloud service, so remediation depends on vendor updates.

Successful exploitation of this vulnerability allows an unauthenticated attacker to bypass authentication controls, resulting in full compromise of the affected system's confidentiality, integrity, and availability. This could enable unauthorized access to sensitive data, modification of system resources, and disruption of service. No known exploits in the wild have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No vendor advisory or patch links are currently available. No specific mitigations are documented at this time.