The vulnerability identified as CVE-2025-60165 affects HaruTheme Frames versions up to 1.5.7. It is due to missing authorization controls, which means that access control security levels are incorrectly configured, allowing users with some privileges to perform unauthorized actions. The CVSS 3.1 base score is 4.3, reflecting a medium severity with network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, no confidentiality or availability impact, but with integrity impact. There is no vendor advisory or patch information available at this time.

The impact is limited to integrity, meaning an attacker with some privileges could perform unauthorized modifications or actions within the Frames product. There is no impact on confidentiality or availability. No known exploits are currently reported, so the threat is theoretical at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations in HaruTheme Frames to ensure proper authorization enforcement. Monitor for vendor updates regarding patches or official mitigations.