This vulnerability in Metagauss RegistrationMagic arises from missing authorization checks, enabling remote attackers to bypass access controls. It affects versions up to and including 6.0.7.6. The CVSS vector indicates the attack can be performed remotely over the network without authentication or user interaction, resulting in high confidentiality impact but no integrity or availability impact. No official patch or vendor advisory is currently provided, and no known exploits are reported in the wild.

Successful exploitation can lead to unauthorized access to sensitive data managed by the RegistrationMagic plugin, compromising confidentiality. There is no indication of impact on integrity or availability. The vulnerability does not require privileges or user interaction, increasing its risk profile.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the RegistrationMagic plugin and monitor for unusual activity related to its use. Avoid exposing the affected plugin to untrusted networks where possible.