The vulnerability identified as CVE-2025-31878 affects the UPC/EAN/GTIN Code Generator software developed by Dmitry V. It is caused by missing authorization checks, which means that users with limited privileges might perform actions beyond their intended access level. This issue is present in versions up to 2.0.2. The CVSS v3.1 base score is 5.4, reflecting a medium severity with network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, and no confidentiality impact but low integrity and availability impacts.

The missing authorization vulnerability allows users with some privileges to potentially perform unauthorized actions that could alter data or disrupt service availability. There is no impact on confidentiality. The overall impact is limited to integrity and availability degradation. No known exploitation in the wild has been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should review and tighten access control configurations where possible to limit privilege escalation risks. Monitor for vendor updates regarding patches or official mitigations.