CVE-2026-32328 is a CSRF vulnerability in the shufflehound Lemmony product affecting versions before 1.7.1. The vulnerability enables attackers to trick authenticated users into submitting unauthorized requests, potentially causing limited integrity and availability impacts. The CVSS 3.1 base score is 5.4, indicating a medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact.

Exploitation of this vulnerability could allow attackers to perform unauthorized actions on behalf of authenticated users, impacting the integrity and availability of the Lemmony application. There is no confidentiality impact reported. No known exploits are currently in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. In the meantime, applying standard CSRF mitigations such as verifying anti-CSRF tokens and restricting unsafe HTTP methods may help reduce risk.