This vulnerability, identified as CVE-2025-58824, affects the Shk Corporate software up to version 2.4.1.1. It is caused by missing authorization checks, which lead to incorrectly configured access control security levels. This could potentially allow an attacker with limited privileges to perform actions beyond their intended permissions. The CVSS 3.1 base score is 4.3, reflecting a medium severity with network attack vector, low attack complexity, low privileges required, no user interaction, and impact limited to integrity loss without confidentiality or availability impact.

The impact is limited to integrity loss due to unauthorized actions that may be performed by an attacker with low privileges. There is no confidentiality or availability impact reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround information is provided, users should monitor vendor communications for updates. Until a fix is available, review and tighten access control configurations where possible to reduce risk.