This vulnerability in echoplugins Knowledge Base for Documentation, FAQs with AI Assistance arises from missing authorization checks, enabling attackers with limited privileges to exploit improperly configured access control settings. The affected product versions are up to 16.011.0. The CVSS score is 4.3, reflecting a network attack vector with low complexity and requiring privileges, causing integrity impact without confidentiality or availability impact.

The vulnerability allows an attacker with some level of privileges to bypass authorization controls, potentially leading to unauthorized modification or manipulation of data within the knowledge base. There is no impact on confidentiality or availability reported. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should review and correct access control configurations to ensure proper authorization enforcement until an official fix is available.