CVE-2025-29007 describes a missing authorization vulnerability in LMSACE Connect (<= 3.4) where access control security levels are incorrectly configured. This flaw allows users with limited privileges to perform actions without proper authorization, resulting in an integrity impact. The vulnerability has a CVSS 3.1 base score of 4.3, reflecting its medium severity with network attack vector, low attack complexity, and no user interaction required. There is no available patch or vendor advisory specifying remediation.

The vulnerability impacts the integrity of LMSACE Connect by allowing unauthorized modification or actions due to missing authorization checks. Confidentiality and availability are not affected. Exploitation requires low privileges but no user interaction, and can be performed remotely over the network. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and strengthen access control configurations in LMSACE Connect to ensure proper authorization enforcement. Monitor for vendor updates regarding patches or official mitigations.