This vulnerability in Brainstorm Force Spectra (up to version 2.19.22) involves missing authorization checks due to incorrectly configured access control. It allows users with low privileges (PR:L) to perform unauthorized actions over the network without user interaction (UI:N). The impact is limited to confidentiality (C:L) with no integrity or availability impact. The vulnerability is publicly known as of April 29, 2026, but no official remediation or patch has been disclosed by the vendor. It is not a cloud service, so remediation depends on vendor patch releases.

The vulnerability allows an attacker with low privileges to access certain functionalities or data without proper authorization, potentially leading to limited confidentiality loss. There is no impact on integrity or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is currently documented, users should monitor vendor communications for updates. Until a patch is available, restricting user privileges and minimizing exposure of the affected plugin may reduce risk.