The vulnerability identified as CVE-2025-67581 affects themetechmount TrueBooker appointment booking software up to version 1.1.0. It is caused by missing authorization checks, resulting in incorrectly configured access control security levels. This flaw could allow an unauthenticated attacker to perform unauthorized actions that affect the integrity of the application. The CVSS vector indicates the attack can be performed remotely without privileges or user interaction, with no impact on confidentiality or availability but with integrity impact. No patch or vendor advisory is currently provided.

Exploitation of this vulnerability can lead to unauthorized modification or manipulation of data within the TrueBooker application, impacting data integrity. There is no impact on confidentiality or availability according to the CVSS vector. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and strengthen access control configurations in TrueBooker deployments to minimize exposure. Monitor for vendor updates regarding patches or official mitigations.