This vulnerability in massiveshift AI Workflow Automation (up to version 1.4.2) involves missing authorization controls, which means that access control security levels are incorrectly configured. This could allow unauthorized users to perform actions that should require authorization. The CVSS score of 5.3 reflects a medium severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to integrity loss without confidentiality or availability impact. No patch or official remediation information is currently provided.

The impact is limited to potential integrity loss due to unauthorized actions performed by attackers exploiting missing authorization controls. There is no confidentiality or availability impact reported. The vulnerability could allow attackers to manipulate or alter workflow automation processes without proper authorization.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is currently documented, users should monitor vendor communications for updates. Until a patch is available, restricting access to the affected versions and applying strict network controls around the AI Workflow Automation system may help reduce exposure.