CVE-2026-32388 describes a missing authorization vulnerability in the linethemes GLB product up to version 1.2.2. The issue arises from incorrectly configured access control security levels, allowing an attacker with low privileges to access or modify resources beyond their authorization. The CVSS 3.1 base score is 5.4 (medium), reflecting network attack vector, low attack complexity, low privileges required, no user interaction, and impacts on confidentiality and integrity but not availability. No patch or remediation details are currently available.

The vulnerability allows attackers with low privileges to bypass authorization controls, potentially leading to unauthorized access or modification of data within the affected GLB product. The impact is limited to confidentiality and integrity, with no reported impact on availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and strengthen access control configurations in the affected GLB deployments to minimize exposure. Monitor vendor channels for updates and apply patches promptly once released.