The vulnerability identified as CVE-2026-32377 affects the raratheme Pranayama Yoga plugin through version 1.2.2. It is caused by missing authorization checks, which result in incorrectly configured access control security levels. This could allow an unauthenticated attacker to perform unauthorized actions that affect the integrity of the application. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity and no privileges or user interaction required. There is no confidentiality or availability impact, only integrity is affected. No patch or vendor advisory is currently provided, and no exploits are known in the wild.

The impact of this vulnerability is limited to integrity, meaning an attacker could potentially alter data or application behavior without proper authorization. There is no impact on confidentiality or availability. Since the attack vector is network-based and requires no privileges or user interaction, the vulnerability could be exploited remotely. However, no known exploits have been reported, and the overall severity is medium.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is available at this time, users should monitor the vendor's announcements for updates. Until a fix is released, consider restricting access to the affected plugin or implementing compensating controls to limit exposure to unauthorized access.