The vulnerability CVE-2026-24631 affects Mikado-Themes Rosebud (<= 1.4) and involves an authorization bypass through a user-controlled key due to incorrectly configured access control security levels. This allows an attacker with low privileges to bypass intended authorization mechanisms, potentially leading to limited integrity and availability impacts. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact.

Exploitation of this vulnerability could allow an attacker with limited privileges to bypass authorization controls, potentially leading to unauthorized actions that affect the integrity and availability of the affected system. There is no impact on confidentiality. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor Mikado-Themes advisories for updates. Until a fix is available, review and strengthen access control configurations to mitigate potential exploitation.