This vulnerability in Frenify Guff (<= 1.0.1) involves missing authorization checks due to misconfigured access control security levels. It allows an unauthenticated attacker to access sensitive data remotely without requiring user interaction. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, high confidentiality impact, and no integrity or availability impact.

An attacker can remotely access sensitive information without authentication, potentially leading to data exposure. There is no reported impact on data integrity or system availability. No known exploits have been observed in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround information is provided, users should monitor Frenify's communications for updates. Until a fix is available, consider restricting network access to the affected Guff service to trusted users only.