The vulnerability CVE-2025-66100 affects Magnigenie RestroPress, a product up to version 3.2.3.5, due to missing authorization controls. This results in incorrectly configured access control security levels that could be exploited remotely with low complexity and without user interaction. The CVSS vector indicates network attack vector, low attack complexity, requiring low privileges, no user interaction, unchanged scope, high confidentiality impact, no integrity or availability impact. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation could lead to unauthorized access to sensitive information within the RestroPress application, impacting confidentiality. There is no reported impact on integrity or availability. The vulnerability does not require user interaction and can be exploited remotely with low privileges, increasing the risk of unauthorized data exposure.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should review and tighten access control configurations where possible to limit exposure. Monitor vendor communications for updates on patches or official mitigations.