The vulnerability CVE-2025-49052 in Dariolee Netease Music arises from missing authorization checks, leading to incorrectly configured access control security levels. This allows attackers with low privileges to potentially perform unauthorized modifications (integrity impact) without requiring user interaction. The affected versions include all versions up to and including 3.2.1. The CVSS 3.1 base score is 4.3, reflecting a network attack vector, low attack complexity, low privileges required, no user interaction, and impact limited to integrity.

The vulnerability impacts the integrity of the Netease Music application by allowing unauthorized actions due to missing authorization controls. There is no impact on confidentiality or availability. No known exploits have been reported, so the practical risk is currently limited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should restrict access to trusted users and monitor for suspicious activity related to authorization misuse. No official patch or workaround information is available at this time.