The Minimalistic Event Manager by Manuel Schmalstieg suffers from a missing authorization vulnerability (CVE-2025-31739) in versions up to 1.1.1. This vulnerability arises due to incorrectly configured access control security levels, allowing an attacker with low privileges to perform unauthorized actions that can impact the integrity and availability of the system. The CVSS 3.1 base score is 6.4 (medium severity), with attack vector network, low attack complexity, requiring low privileges, no user interaction, and scope changed. No patch or vendor advisory information is currently available, and no exploits are known in the wild.

Exploitation of this vulnerability can lead to unauthorized modification or disruption of the Minimalistic Event Manager's functionality, impacting system integrity and availability. Confidentiality is not affected. The attacker requires low privileges and can exploit this remotely without user interaction. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations to ensure proper authorization enforcement. Monitor for vendor updates regarding patches or official mitigations.