This vulnerability in raratheme Benevolent arises from missing authorization, enabling attackers to bypass access control restrictions. It affects all versions up to and including 1.3.9. The CVSS score of 5.3 reflects a network attack vector with low complexity and no privileges or user interaction required. The impact is limited to integrity loss, with no confidentiality or availability impact reported. No patch or vendor advisory is currently provided, and no exploits are known in the wild.

The vulnerability allows unauthorized modification of data or functionality (integrity impact) without affecting confidentiality or availability. Exploitation requires no privileges and no user interaction, making it accessible remotely. However, the overall impact is medium severity due to the limited scope of integrity compromise and absence of known active exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and strengthen access control configurations in the affected versions of Benevolent. Monitor vendor channels for updates and apply patches promptly once available.