CVE-2026-32381 describes a missing authorization vulnerability in the raratheme App Landing Page application, affecting versions up to 1.2.2. The flaw arises from incorrectly configured access control security levels, permitting unauthorized access to certain functionality or data integrity modifications. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and no availability impact. No patch or official fix has been published, and no known exploits exist at this time.

The vulnerability allows unauthorized users to perform actions that could alter data integrity within the affected application. There is no impact on confidentiality or availability. Since no known exploits are reported, the immediate risk is moderate but could increase if exploitation techniques emerge.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should restrict access to the affected application where possible and monitor for updates from raratheme. No specific mitigations are documented at this time.