CVE-2025-48344 is a medium severity Cross-Site Request Forgery (CSRF) vulnerability in the ed4becky Rootspersona product, affecting versions through 3.7.5. The vulnerability allows an attacker to induce an authenticated user to perform unintended actions via forged requests. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, limited integrity impact, and limited availability impact. There is no vendor advisory or patch information provided, and no known exploits have been observed.

The vulnerability could allow an attacker to cause limited integrity and availability impacts by tricking authenticated users into submitting forged requests. There is no confidentiality impact. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, consider implementing CSRF protections such as verifying anti-CSRF tokens if possible within the application environment.