The vulnerability CVE-2025-49381 in ads.txt Guru Connect is a Cross-Site Request Forgery (CSRF) issue affecting versions up to 1.1.1. CSRF vulnerabilities enable attackers to induce users to perform actions they did not intend, leveraging the user's authenticated session. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation of this CSRF vulnerability can lead to unauthorized actions performed on behalf of authenticated users, potentially resulting in full compromise of the affected system's confidentiality, integrity, and availability. Given the critical CVSS score of 9.6, the impact is severe if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as verifying origin headers, using anti-CSRF tokens, or restricting access to trusted users. Monitor vendor channels for updates and apply patches promptly once released.