The vulnerability CVE-2025-48326 in Acclectic Media Organizer arises from missing authorization controls, enabling exploitation of incorrectly configured access control security levels. Affected versions include all releases up to and including 1.4. The CVSS 3.1 base score is 6.5, reflecting a network attack vector, low attack complexity, requiring low privileges and no user interaction, with no confidentiality or availability impact but high integrity impact. No patch or vendor advisory is currently available, and the product is not a cloud service.

Exploitation of this vulnerability allows an attacker with low privileges to perform unauthorized actions that compromise the integrity of the Acclectic Media Organizer system. There is no impact on confidentiality or availability. No known exploits have been observed in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to trusted users only and monitor for unusual activity related to access control misuse. Avoid granting unnecessary privileges to users to reduce risk.