The vulnerability CVE-2025-31376 in Mayeenul Islam's NanoSupport product is due to missing authorization checks caused by incorrectly configured access control security levels. This flaw allows an attacker with limited privileges to perform actions that should be restricted. The affected versions include all releases up to 0.6.0. The CVSS 3.1 base score is 4.3, reflecting a medium severity with network attack vector, low attack complexity, requiring low privileges, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and no availability impact. No patch or official remediation information is provided in the available data.

The vulnerability allows unauthorized actions due to missing authorization controls, potentially leading to limited integrity impact within the affected NanoSupport versions. There is no impact on confidentiality or availability reported. The medium severity score reflects that the issue could be exploited remotely with low complexity and low privileges, but with limited overall impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is available, users should monitor vendor communications for updates. Until a fix is provided, restricting access to the affected NanoSupport versions and minimizing exposure may reduce risk.