The vulnerability CVE-2026-32380 affects raratheme Numinous versions up to 1.3.0 and is characterized by missing authorization checks. This results in incorrectly configured access control security levels, which could allow an attacker to perform unauthorized actions that compromise data integrity. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to integrity. No patch or vendor advisory is currently available, and the product is not a cloud service.

The impact is limited to integrity, meaning unauthorized modifications or actions may be possible without affecting confidentiality or availability. The vulnerability can be exploited remotely without authentication or user interaction. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix is currently available, users should monitor vendor communications for updates. Until a fix is released, consider restricting access to affected versions or applying compensating controls specific to access control configurations if feasible.