CVE-2025-69358 is a missing authorization vulnerability affecting Metagauss EventPrime eventprime-event-calendar-management versions up to 4.2.6.0. The issue arises from incorrectly configured access control security levels, allowing unauthorized users to perform actions that should be restricted. The CVSS 3.1 base score is 7.5, reflecting a network attack vector with no privileges or user interaction required, resulting in high impact on integrity but no impact on confidentiality or availability. No patch or vendor advisory is currently available, and the product is not a cloud service.

The vulnerability allows unauthorized modification of data within EventPrime due to missing authorization checks. This can lead to integrity compromise of event calendar management data. There is no reported impact on confidentiality or availability. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, organizations should monitor vendor communications for updates. Until a patch is available, restrict access to EventPrime installations to trusted users and networks to reduce exposure.