CVE-2025-39367 describes a missing authorization vulnerability in the SeventhQueen Kleo product, affecting versions before 5.4.4. The vulnerability allows an unauthenticated attacker to access certain features or data over the network without proper authorization checks. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, and limited confidentiality impact. No integrity or availability impacts are noted. No patch or official remediation details are provided in the available data.

The vulnerability allows unauthorized remote access to some information or functionality, impacting confidentiality to a limited extent. There is no impact on data integrity or system availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected Kleo versions and monitor for unusual access attempts. Avoid deploying affected versions in exposed environments.