This vulnerability (CVE-2025-52813) in pietro MobiLoud is classified as CWE-862 (Missing Authorization). It arises from improperly configured access control mechanisms that fail to enforce correct authorization checks. The issue affects MobiLoud versions up to 4.6.5. The CVSS v3.1 score of 8.1 reflects a network attack vector with low attack complexity, requiring low privileges and no user interaction, impacting integrity and availability without confidentiality loss. No patch or official fix information is currently available, and the product is not a cloud service, so remediation depends on vendor updates.

Successful exploitation can lead to unauthorized modification or disruption of the affected system's integrity and availability. Confidentiality is not impacted according to the CVSS vector. The vulnerability could allow attackers with low privileges to perform high-impact actions due to missing authorization checks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix is currently documented, users should monitor vendor communications for updates. Until a fix is available, carefully review and tighten access control configurations where possible to mitigate risk.