The vulnerability identified as CVE-2025-66150 affects the merkulove Appender application through missing authorization controls. This flaw allows an attacker with low privileges to exploit improperly configured access control mechanisms, potentially impacting the integrity and availability of the application. The affected versions include all up to 1.1.1. The CVSS 3.1 base score is 5.4, reflecting a medium severity with network attack vector, low attack complexity, and no user interaction required. There is no indication of confidentiality impact. No vendor advisory or patch information is currently available.

The vulnerability can lead to limited integrity and availability impacts due to missing authorization checks. An attacker with low privileges could exploit this to perform unauthorized actions within the application. There is no reported impact on confidentiality. No known exploits are currently active in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations in the merkulove Appender application to ensure proper authorization enforcement. Monitor vendor channels for updates or patches addressing this vulnerability.