The vulnerability CVE-2025-58817 affects desertthemes SoftMe versions up to 1.1.27 and is due to missing authorization controls. This allows users with some privileges (low privilege level) to bypass access restrictions and perform unauthorized actions, impacting data integrity. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low attack complexity, requiring privileges but no user interaction, and limited impact confined to integrity. No patch or official remediation guidance is currently provided.

The vulnerability allows unauthorized modification or manipulation of data or functionality within the SoftMe application by users with limited privileges. There is no impact on confidentiality or availability reported. The overall impact is limited to integrity, which could affect the trustworthiness of the affected system's data or operations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to trusted users only and monitor for unusual activity related to privilege escalation or unauthorized actions within SoftMe. Avoid exposing the affected versions to untrusted networks where possible.