The vulnerability CVE-2025-39352 affects ThemeGoods Grand Restaurant through version 7.0 and involves missing authorization checks. This results in incorrectly configured access control security levels, enabling unauthorized users to perform unauthorized actions. The CVSS v3.1 score is 8.2 (high), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and high availability impact. No patch or official remediation information is currently available, and the product is not a cloud service.

Exploitation of this vulnerability can lead to unauthorized modification of data (integrity loss) and cause denial of service (availability impact) in the affected Grand Restaurant application. Confidentiality is not impacted. The vulnerability can be exploited remotely without authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected application and monitor for unusual activity related to access control. Avoid exposing the vulnerable application to untrusted networks if possible.