The vulnerability identified as CVE-2025-67547 affects the uixthemes Konte product through version 2.4.6. It is caused by missing authorization controls, leading to incorrect access control security levels. This flaw allows unauthorized users to perform actions that can alter the integrity and availability of the system. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges or user interaction, with low attack complexity. No confidentiality impact is noted. No official patch or vendor advisory is currently provided, and no exploits are known in the wild.

Exploitation of this vulnerability can lead to unauthorized integrity and availability impacts on affected systems running Konte up to version 2.4.6. Since no confidentiality impact is indicated, sensitive data exposure is not expected. The medium severity reflects the potential for disruption or unauthorized modification without requiring privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or vendor advisory is available at this time, users should monitor uixthemes communications for updates. In the interim, review and tighten access control configurations where possible to reduce exposure.