The vulnerability CVE-2025-31736 affects the richtexteditor Rich Text Editor up to version 1.0.1. It is caused by missing authorization checks, which means that access control is improperly configured, allowing unauthorized users to perform actions that should be restricted. The CVSS v3.1 base score is 6.5, with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, but integrity and availability impacts rated low and high respectively. No patch or official remediation information is currently available.

An attacker can exploit the missing authorization to perform unauthorized actions within the Rich Text Editor, potentially modifying content or causing denial of service. The integrity and availability of the application can be impacted, but confidentiality is not affected. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, review and tighten access control configurations around the Rich Text Editor to limit exposure. Monitor for updates from the vendor or security advisories for official patches or mitigations.