CVE-2025-69298 describes a missing authorization vulnerability in the GhostPool Gauge product affecting versions up to 6.56.4. The issue arises from incorrectly configured access control security levels, which can be exploited remotely without privileges or user interaction to gain unauthorized access. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, high confidentiality impact, and no impact on integrity or availability.

Successful exploitation of this vulnerability could lead to unauthorized disclosure of sensitive information within the affected GhostPool Gauge installations. There is no indication of impact on data integrity or system availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, restrict access to the affected versions where possible to trusted users only.