CVE-2025-68498 describes a missing authorization vulnerability in Crocoblock JetTabs plugin versions up to 2.2.12. The issue arises from incorrectly configured access control security levels, allowing attackers with low privileges to access data without proper authorization. The vulnerability has a CVSS 3.1 base score of 6.5, with network attack vector, low attack complexity, requiring privileges but no user interaction, and results in high confidentiality impact without affecting integrity or availability. There is no vendor advisory or patch information currently available, and no known exploits have been reported.

The vulnerability allows unauthorized access to sensitive data due to missing authorization checks, impacting confidentiality. There is no impact on data integrity or system availability. The medium severity score reflects the potential for data exposure but limited scope of exploitation requiring some privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should restrict access privileges to trusted users only and monitor for updates from Crocoblock regarding JetTabs. No specific mitigations are documented by the vendor at this time.