The vulnerability CVE-2026-24540 affects the princeahmed Integrate Google Drive plugin up to version 1.5.6. It is a missing authorization vulnerability where access control is incorrectly configured, allowing users with some privileges to bypass intended restrictions. The CVSS 3.1 base score is 5.4 (medium), reflecting network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, limited confidentiality impact, no integrity impact, and low availability impact. No patch or official remediation guidance is currently provided.

Exploitation of this vulnerability could allow an attacker with some level of privileges to access or perform actions beyond their authorization level, resulting in limited confidentiality loss and minor availability disruption. There is no indication of integrity compromise or widespread exploitation at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected plugin to trusted users only and monitor for unusual activity related to Google Drive integration features.