CVE-2025-58594 describes a missing authorization vulnerability in themefusecom's Brizy product versions up to 2.7.12. The issue involves incorrect access control configurations that permit unauthorized users with low privileges to perform actions that can alter data integrity. The vulnerability does not affect confidentiality or availability and requires network access with low privileges and no user interaction. The CVSS 3.1 base score is 4.3, reflecting medium severity. No patch or vendor advisory information is currently available, and no exploits are known in the wild.

The vulnerability allows unauthorized modification of data or actions within the Brizy product due to missing authorization checks. It does not impact confidentiality or availability. The medium CVSS score reflects the limited scope of impact, requiring low privileges but no user interaction. There are no reports of active exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users should monitor themefusecom's communications for updates. In the meantime, restrict access to the affected Brizy versions and apply principle of least privilege to limit exposure.