CVE-2026-32331 describes a missing authorization vulnerability in Israpil Textmetrics webtexttool versions up to 3.6.4. This vulnerability arises from incorrectly configured access control security levels, allowing an attacker with low privileges to perform unauthorized actions without user interaction. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact.

The vulnerability allows an attacker with low privileges to exploit missing authorization controls, potentially leading to limited integrity and availability impacts within the affected application. There is no confidentiality impact reported. No known exploits are currently observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or vendor advisory is provided, users should monitor for updates from Israpil and apply any forthcoming patches promptly. In the meantime, review and tighten access control configurations to mitigate potential exploitation.