This vulnerability involves missing authorization in the Ays Pro AI ChatBot with ChatGPT and Content Generator by AYS, specifically in versions up to and including 2.7.4. The flaw allows attackers to bypass access control mechanisms due to incorrect configuration, potentially enabling unauthorized modification or manipulation of the system. The CVSS score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, integrity impact low, and no availability impact. No patch or vendor advisory is provided, and the product is not a cloud service.

The vulnerability can lead to unauthorized integrity modifications within the affected AI ChatBot system due to missing authorization controls. There is no impact on confidentiality or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations in the affected versions to prevent unauthorized access. Monitor for vendor updates regarding patches or official mitigations.