This vulnerability, identified as CVE-2025-63004, affects the All in One Accessibility product by Skynet Technologies USA LLC. It is caused by missing authorization checks, which result in improperly configured access control security levels. The CVSS 3.1 base score is 4.3 (medium), with an attack vector of network, low attack complexity, requiring low privileges, no user interaction, and unchanged scope. The impact is limited to integrity, with no confidentiality or availability impact reported. The affected versions include all versions up to and including 1.15. No patch or vendor advisory is currently available, and no known exploits have been reported.

The vulnerability allows an attacker with low privileges to exploit missing authorization controls, potentially leading to unauthorized modification of data or settings (integrity impact). There is no impact on confidentiality or availability. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor for vendor updates and apply any official patches once available. Until then, review and tighten access control configurations where possible to mitigate risk.