CVE-2025-8532 is an authorization bypass vulnerability (CWE-639) in the eBA Document and Workflow Management System by Bimser Solution Software Trade Inc. It affects versions from 6.7.164 before 6.7.166. The vulnerability arises from improper authorization checks that allow forceful browsing via user-controlled keys, potentially granting unauthorized access to restricted resources. The CVSS 3.1 base score is 6.4, with attack vector local, high attack complexity, low privileges required, no user interaction, and a scope change. Confidentiality impact is low, integrity impact is high, and availability impact is none. No patch or official fix has been documented yet.

The vulnerability allows an attacker with local access and low privileges to bypass authorization controls by manipulating user-controlled keys, enabling forceful browsing of restricted content. This can lead to unauthorized modification of data (high integrity impact) and limited disclosure of information (low confidentiality impact). There is no impact on system availability. No known exploits are reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix is currently documented, users should monitor Bimser Solution Software Trade Inc. advisories for updates. Until a fix is available, restrict local access to trusted users only and consider additional access controls to mitigate unauthorized browsing risks.