The vulnerability identified as CVE-2025-31789 affects Matat Technologies TextMe SMS versions up to 1.9.1. It stems from missing authorization checks caused by incorrectly configured access control security levels. This flaw allows an attacker with low privileges to perform unauthorized actions that impact the integrity of the system, without affecting confidentiality or availability. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact.

Exploitation of this vulnerability could allow an attacker with some level of privileges to modify information without proper authorization, impacting the integrity of the affected system. Confidentiality and availability are not affected. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, review and tighten access control configurations to ensure proper authorization enforcement where possible.