The vulnerability identified as CVE-2025-58841 affects John Luetke's Media Author product through version 1.0.4. It involves incorrect privilege assignment that can lead to privilege escalation. The CVSS 3.1 vector indicates the attack vector is network-based, requires low attack complexity, and privileges are required but with no user interaction. The impact includes limited integrity loss and high availability impact. No patch or vendor advisory details are provided, and the product is not a cloud service.

This vulnerability allows an attacker with some level of privilege to escalate their privileges within the Media Author application, potentially leading to disruption of service (high availability impact) and limited integrity compromise. There is no evidence of confidentiality impact. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround information is provided, users should monitor for vendor updates and apply any official fixes once available. Avoid granting unnecessary privileges to users until the issue is resolved.