This vulnerability in Turtek Software Eyotek involves an authorization bypass caused by improper handling of user-controlled keys, which can be used to exploit trusted identifiers. The issue is classified under CWE-639, indicating a flaw in authorization logic. The vulnerability affects all versions prior to 23.06.2025. The CVSS score of 6.5 reflects a network attack vector with low attack complexity, no privileges required, and user interaction needed. Confidentiality impact is high, while integrity and availability impacts are not affected. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation could allow an attacker to bypass authorization controls by manipulating user-controlled keys, potentially gaining unauthorized access to sensitive information. The confidentiality impact is rated high, but there is no impact on integrity or availability. No known exploits have been reported in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from Turtek Software. No specific mitigations are provided by the vendor at this time.