This vulnerability (CVE-2025-62104) in ACF Galerie 4 arises from missing authorization controls, classified under CWE-862. It allows exploitation due to incorrectly configured access control security levels, potentially permitting unauthorized users with limited privileges to perform actions that could alter data integrity. The affected product versions include all releases up to 1.4.2. The CVSS 3.1 base score is 4.3, reflecting a medium severity with network attack vector, low attack complexity, requiring privileges, no user interaction, and impact limited to integrity.

The vulnerability could allow an attacker with some level of privileges to perform unauthorized actions that affect the integrity of the application or its data. There is no impact on confidentiality or availability reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is provided, users should monitor vendor communications for updates. Until a patch is available, carefully review and restrict user privileges to minimize potential unauthorized actions.