The vulnerability identified as CVE-2025-59005 in frenify Categorify involves missing authorization controls, which means that certain actions or resources may be accessible without proper permission checks. This issue affects versions up to and including 1.0.7.5. The CVSS 3.1 base score is 4.3, with the vector indicating network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, and low integrity impact. The vulnerability is categorized as an access control weakness due to misconfiguration. No patch or official fix information is currently available, and the product is not a cloud service, so remediation depends on vendor updates.

The impact of this vulnerability is limited to integrity, as unauthorized users with low privileges might perform certain actions that should be restricted. There is no impact on confidentiality or availability according to the CVSS vector. Since no known exploits are reported, the immediate risk appears moderate. However, exploitation could lead to unauthorized modifications within the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix has been published, users should monitor vendor communications for updates. Until a fix is available, review and tighten access control configurations where possible to mitigate risk.