The vulnerability CVE-2025-23512 affects the 118group Team 118GROUP Agent up to version 1.6.0. It arises from missing authorization controls, allowing unauthorized access to certain functions or resources. The CVSS 3.1 base score is 7.5, reflecting a high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and an impact limited to availability (denial of service). No patch or vendor advisory is currently provided, and the product is not a cloud service.

The impact is a high-severity denial of service due to missing authorization checks, which could allow an unauthenticated attacker to disrupt availability of the affected software. There is no evidence of confidentiality or integrity impact. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users should monitor the vendor's communications for updates. Until a patch is available, consider restricting network access to the affected service to trusted sources as a temporary mitigation.