CVE-2026-39721: Missing Authorization in Brainstorm Force Starter Templates

This vulnerability in Brainstorm Force Starter Templates (astra-sites) arises from missing authorization checks, allowing attackers with limited privileges to exploit incorrectly configured access control security levels. It affects all versions from initial releases up to 4.7.7. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requires low privileges, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and high availability impact.

The vulnerability could allow an attacker with low privileges to perform unauthorized actions that impact the integrity and availability of the affected system. There is no confidentiality impact reported. No known exploits are currently in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or fix links are provided in the available data. Users should monitor Brainstorm Force communications for updates and apply any official fixes once available.