This vulnerability in AudioTheme Cue (<= 2.4.4) arises from missing authorization controls, enabling exploitation of incorrectly configured access control security levels. The CVSS vector indicates the attack can be performed remotely over the network with low complexity and requires low privileges, without user interaction. The impact is limited to partial confidentiality loss, with no integrity or availability impact. No patch or vendor advisory is currently provided, and no exploits are known in the wild.

An attacker with low privileges can exploit missing authorization to gain unauthorized access to certain information, resulting in limited confidentiality impact. There is no impact on data integrity or system availability. No active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations in AudioTheme Cue to ensure proper authorization enforcement. Monitor for vendor updates regarding patches or official mitigations.