This vulnerability (CVE-2025-7355) in the Beefull App allows an attacker with low privileges to bypass authorization controls by manipulating user-controlled keys, exploiting trusted identifiers. The issue is classified under CWE-639 (Authorization Bypass Through User-Controlled Key). It affects all versions of the Beefull App prior to 24.07.2025. The CVSS 3.1 vector indicates network attack vector, low attack complexity, privileges required, no user interaction, unchanged scope, high confidentiality impact, and no impact on integrity or availability.

Successful exploitation could lead to unauthorized access to sensitive information within the Beefull App, compromising confidentiality. There is no indication of impact on data integrity or system availability. The vulnerability requires some level of privileges and can be exploited remotely over the network. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected versions and monitor for unusual activity related to authorization mechanisms. Avoid using vulnerable versions of the Beefull App where possible.