CVE-2026-107430: Missing Authorization in VideoWhisper.com VideoWhisper Site Manager for ChatGPT, Claude, Codex

This vulnerability in VideoWhisper Site Manager for ChatGPT, Claude, Codex arises from missing authorization checks, enabling attackers with limited privileges to bypass intended access controls. The affected versions include all releases prior to 1.2.11. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and low impact on confidentiality and integrity, with no impact on availability.

An attacker with low privileges can exploit the missing authorization to access or modify resources beyond their intended permissions, potentially leading to limited confidentiality and integrity breaches. There is no impact on system availability. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, restrict access to the affected application to trusted users only and review access control configurations carefully.