This vulnerability (CVE-2025-52721) in LCweb Global Gallery is classified as CWE-862 (Missing Authorization). It affects versions up to 9.2.3 and involves improper enforcement of access control, allowing unauthorized users to access or modify resources that should be protected. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and impacts on confidentiality and integrity but not availability. No patch or official fix has been documented, and the product is not a cloud service, so remediation depends on vendor updates.

The vulnerability allows unauthorized access to protected resources within the affected product, potentially leading to partial disclosure and modification of data. There is no indication of availability impact. Exploitation does not require privileges or user interaction, increasing the risk. However, no known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix is currently documented, users should monitor vendor communications for updates. Until a fix is available, consider restricting access to the affected application and reviewing access control configurations to minimize exposure.