The vulnerability identified as CVE-2025-62018 affects hogash KALLYAS versions up to 4.22.0 and is characterized by missing authorization controls. This means that certain operations or functionalities that should require proper authorization checks do not enforce them, allowing unauthorized access to perform actions that can alter data or system state. The CVSS vector indicates the vulnerability is remotely exploitable over the network without privileges or user interaction, impacting integrity but not confidentiality or availability.

Exploitation of this vulnerability can lead to unauthorized modification of data or system state (integrity impact). There is no impact on confidentiality or availability according to the CVSS vector. No known active exploits have been reported, which may limit immediate risk, but the medium severity score suggests moderate concern.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, it is recommended to monitor the vendor's communications for updates. Until a fix is available, consider restricting access to affected versions and applying compensating controls to limit unauthorized access where possible.