This vulnerability (CVE-2026-54821) affects Visual Link Preview software by Bootstrapped Ventures in versions <= 2.3.1. It allows sensitive subscriber data to be inserted into sent data, potentially exposing this information to unauthorized parties. The CVSS 3.1 base score is 7.4, indicating high severity, with attack vector network, low attack complexity, requiring low privileges but no user interaction, and impacts confidentiality, integrity, and availability. There is currently no official fix or patch available, and no known exploits in the wild have been reported.

The vulnerability can lead to exposure of sensitive subscriber data, compromising confidentiality. Additionally, it impacts integrity and availability, suggesting that the inserted sensitive information could be manipulated or cause disruption. This can affect the trustworthiness and reliability of the Visual Link Preview product in affected versions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is currently available, users should monitor vendor communications for updates. Until a patch is released, consider limiting exposure by restricting access to the affected versions or implementing compensating controls specific to data handling.