CVE-2025-58606 describes a missing authorization vulnerability in cozythemes SaasLauncher (versions <= 1.3.0). The issue arises from incorrectly configured access control security levels, which may allow an attacker with limited privileges to perform unauthorized actions that affect system integrity. The vulnerability has a CVSS 3.1 base score of 5.0, indicating medium severity. No patch or official remediation information is currently available, and the product is not a cloud service, so remediation depends on vendor updates or user-applied fixes.

The vulnerability can lead to unauthorized modification or manipulation of system components due to missing or incorrect authorization checks. Although confidentiality and availability are not impacted, the integrity of the affected system can be compromised. There are no known exploits in the wild, so active exploitation has not been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is available, users should monitor cozythemes communications for updates. Until a fix is released, review and tighten access control configurations where possible to mitigate risk.