This vulnerability in Metagauss RegistrationMagic arises from missing authorization checks, which means that certain actions or resources may be accessible without proper permission validation. The affected versions include all versions up to and including 6.0.7.6. The CVSS 3.1 base score is 5.4 (medium), with network attack vector, low attack complexity, requiring low privileges, no user interaction, and impacts limited to integrity and availability. No vendor advisory or patch information is provided, and the product is not a cloud service.

Exploitation of this vulnerability could allow an attacker with low privileges to perform unauthorized actions that affect the integrity and availability of the RegistrationMagic plugin. Confidentiality is not impacted. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations in RegistrationMagic to limit potential unauthorized actions. Monitor vendor communications for updates on patches or official mitigations.