CVE-2025-51627 is an access control vulnerability (CWE-284) in Agenzia Impresa Eccobook v2.81.1, specifically in the CaricaVerbale functionality. It permits authenticated attackers with minimal privileges to escalate their access to Administrator level. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low attack complexity and no user interaction, resulting in limited confidentiality and integrity impact but no availability impact.

An attacker with low-level authenticated access can gain Administrator privileges, potentially allowing unauthorized administrative actions within the affected application. This could lead to unauthorized data modification or access beyond the attacker's original permissions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected version and monitor for suspicious privilege escalation attempts.