The vulnerability identified as CVE-2026-24984 affects Brecht Visual Link Preview (up to version 2.2.9) and arises from missing authorization checks. This results in incorrect access control configurations that could allow an attacker with low privileges and no user interaction to access sensitive information over the network. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, and no impact on integrity or availability.

Successful exploitation of this vulnerability could lead to unauthorized disclosure of sensitive information due to missing authorization controls. The confidentiality of data is impacted, but integrity and availability remain unaffected. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix links are provided, users should monitor Brecht's official channels for updates. Until a fix is available, restrict access to the affected Visual Link Preview installations to trusted users only and review access control configurations to minimize exposure.