This vulnerability in Bertha AI (versions up to 1.13) is caused by missing authorization controls, allowing unauthorized access to certain functions or data due to incorrectly configured access control security levels. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and no availability impact. No patch or official remediation information is currently available.

Exploitation of this vulnerability can lead to unauthorized modification or manipulation of data or functions within Bertha AI, impacting data integrity. There is no impact on confidentiality or availability. Since no known exploits are reported, the immediate risk appears limited but should be monitored.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to Bertha AI instances to trusted users and environments to minimize exposure. Monitor for updates from the vendor regarding patches or official mitigations.