The vulnerability identified as CVE-2025-63018 affects wproyal Bard through version 2.229 and involves missing authorization controls. This incorrect access control configuration permits users with limited privileges to execute unauthorized actions, impacting the integrity of the system. The CVSS 3.1 base score is 4.3 (medium), reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, and integrity impact only. No patch or official remediation details are provided in the available data.

An attacker with low privileges can exploit this missing authorization vulnerability to perform unauthorized modifications or actions within the affected Bard product, potentially compromising data integrity. There is no impact on confidentiality or availability reported. No known exploitation in the wild has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and strengthen access control configurations in wproyal Bard to ensure proper authorization enforcement. Monitor for vendor updates and apply patches promptly once released.