The vulnerability identified as CVE-2026-32350 affects wpradiant Chocolate House versions up to 1.1.5 and is characterized by missing authorization checks. This results from incorrectly configured access control security levels, enabling unauthorized users to perform actions that could alter data integrity. The CVSS v3.1 base score is 5.3, reflecting a network attack vector with low attack complexity, no privileges required, no user interaction, and impact limited to integrity loss. No patch or vendor advisory details are currently available, and the product is not a cloud service.

Exploitation of this vulnerability could allow an unauthenticated attacker to perform unauthorized actions that compromise the integrity of the system or data within Chocolate House. There is no impact on confidentiality or availability reported. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should review and strengthen access control configurations to mitigate risks associated with missing authorization. Monitor vendor communications for updates on patches or official mitigations.