The vulnerability identified as CVE-2025-58660 affects brandexponents Oshine Core up to version 1.5.5. It is caused by missing authorization checks, resulting in improperly enforced access control security levels. The CVSS 3.1 base score is 5.4 (medium), with network attack vector, low attack complexity, requiring low privileges, no user interaction, and impacts limited to integrity and availability. There is no evidence of confidentiality impact. No patch or official remediation guidance has been provided yet.

Successful exploitation could allow an attacker with low privileges to perform unauthorized actions that may alter data integrity or disrupt availability within the affected Oshine Core system. Confidentiality is not impacted according to the CVSS vector. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations in Oshine Core deployments to minimize exposure. Monitor for vendor updates and apply patches promptly once available.