This vulnerability in App Cheap's App Builder (<= 5.5.6) is caused by missing authorization checks, resulting in incorrectly configured access control security levels. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity, no privileges required, no user interaction, and an impact limited to partial confidentiality loss. The issue allows unauthorized access to certain data or functionality due to the absence of proper authorization enforcement.

The impact is limited to confidentiality loss, meaning unauthorized parties may access some sensitive information. There is no impact on integrity or availability. The vulnerability does not require authentication or user interaction, increasing the risk of unauthorized data exposure. However, no known exploits have been reported in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix is referenced, users should monitor vendor communications for updates. Until a fix is available, review and tighten access control configurations where possible to reduce exposure.