The vulnerability CVE-2026-25411 is a CSRF issue in themastercut Revision Manager TMC (revision-manager-tmc) affecting versions up to 2.8.22. It allows an attacker to induce an authenticated user to perform unwanted actions without their consent. The CVSS vector indicates the attack can be performed remotely over the network without privileges but requires user interaction. The impact is limited to integrity loss without confidentiality or availability impact.

The vulnerability can lead to unauthorized actions performed by an authenticated user without their intention, potentially modifying data or settings within the Revision Manager TMC application. There is no direct impact on confidentiality or availability according to the CVSS vector. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as verifying anti-CSRF tokens or restricting actions to trusted contexts. Monitor vendor communications for updates on patches or official mitigations.