The vulnerability identified as CVE-2025-26750 affects appsbd Vitepos vitepos-lite versions up to 3.1.3. It arises from missing authorization controls, which means that certain access control mechanisms are improperly configured or absent. This can allow an attacker with low privileges and no user interaction required to access or invoke functionality that should be restricted. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, and no impact on integrity or availability.

Successful exploitation of this vulnerability could lead to unauthorized disclosure of sensitive information due to the high confidentiality impact. There is no impact on integrity or availability. The vulnerability requires low privileges and no user interaction, making it moderately risky in environments where attackers can gain network access with limited privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, review and tighten access control configurations in Vitepos deployments to ensure proper authorization enforcement.