CVE-2025-23971 describes a missing authorization vulnerability in whassan KI Live Video Conferences (versions up to 5.5.15). The vulnerability arises from incorrectly configured access control security levels, allowing unauthorized users to perform actions that should require authorization. The CVSS 3.1 base score is 5.3 (medium), with network attack vector, low attack complexity, no privileges required, no user interaction, and an impact limited to integrity loss. No patch or vendor advisory is currently provided, and the product is not a cloud service.

The vulnerability can lead to unauthorized modification or manipulation of data or functionality within the KI Live Video Conferences application, impacting data integrity. There is no reported impact on confidentiality or availability. No known exploits have been observed in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix is currently available, organizations should monitor vendor communications for updates. Until a fix is released, consider restricting access to the affected application to trusted users and networks where possible.