The vulnerability CVE-2025-52801 affects VonStroheim TheBooking (versions <= 1.4.4) and is characterized by missing authorization checks on certain functionality. This means that users without proper privileges may access features or data that should be protected by ACLs. The CVSS 3.1 score of 7.3 reflects a high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. No patch or vendor advisory is currently provided, and the product is not a cloud service.

Exploitation of this vulnerability could allow an unauthenticated attacker to access restricted functionality, potentially leading to unauthorized disclosure, modification, or denial of service within the affected application. The impact affects confidentiality, integrity, and availability as indicated by the CVSS vector. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, organizations using VonStroheim TheBooking should monitor vendor communications for updates. Until a fix is available, consider restricting network access to the application and reviewing access controls to limit exposure.