The vulnerability identified as CVE-2025-39385 affects vowelweb Sirat through version 1.5.1 and is characterized by missing authorization checks. This results in incorrectly configured access control security levels, allowing users with low privileges to perform unauthorized actions that may affect data integrity. The CVSS 3.1 base score is 4.3 (medium), reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, and limited integrity impact. There is no vendor advisory or patch information available at this time.

The impact is limited to integrity, where unauthorized modification or manipulation of data or system state may occur due to missing authorization controls. There is no impact on confidentiality or availability. No known exploits have been reported in the wild, indicating limited active exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and strengthen access control configurations in vowelweb Sirat to ensure proper authorization enforcement. Monitor for vendor updates or security advisories regarding this vulnerability.