The vulnerability CVE-2025-58259 is a CSRF issue in the scriptsbundle Nokri product affecting versions up to 1.6.4. CSRF vulnerabilities enable attackers to trick authenticated users into submitting unauthorized requests to the affected application, potentially leading to unintended actions. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low attack complexity, requires no privileges but does require user interaction, and impacts the integrity and availability of the application without compromising confidentiality.

Successful exploitation of this CSRF vulnerability could allow an attacker to cause a user to perform actions that compromise the integrity and availability of the Nokri application. Confidentiality is not impacted according to the CVSS vector. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. In the meantime, applying standard CSRF mitigations such as verifying anti-CSRF tokens in requests may help reduce risk if feasible.