CVE-2025-68557 describes a missing authorization vulnerability in the Chakra test product by Vikas Ratudi, present in versions up to 1.0.1. The issue arises from incorrectly configured access control security levels, which could allow an attacker with low privileges to perform unauthorized actions that modify data integrity. The vulnerability does not impact confidentiality or availability. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requiring low privileges, no user interaction, and unchanged scope.

The vulnerability allows an attacker with low privileges to exploit missing authorization controls, potentially leading to integrity violations within the affected software. There is no impact on confidentiality or availability reported. No known exploitation in the wild has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, restrict access to the affected software to trusted users only and review access control configurations to minimize risk.