The vulnerability identified as CVE-2025-39531 affects Slazzer Background Changer versions up to 3.14. It is caused by missing authorization checks, allowing unauthenticated or unauthorized users to access certain functions that should be protected by ACLs. According to the CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L), the attack can be performed remotely without privileges or user interaction, impacting availability but not confidentiality or integrity. No patch or vendor advisory is currently available to confirm remediation status.

The impact is limited to availability, meaning an attacker could potentially disrupt or degrade the service or functionality of the Slazzer Background Changer. There is no impact on confidentiality or integrity of data. No known exploits have been reported, which may limit the immediate risk but does not eliminate the vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected application where possible and monitor for unusual activity related to unauthorized access attempts. Avoid exposing the vulnerable service to untrusted networks.