This vulnerability (CVE-2026-57341) in the Colissimo Officiel : Méthodes de livraison pour WooCommerce plugin is classified as CWE-639 (Authorization Bypass Through User-Controlled Key). It allows unauthenticated attackers to exploit insecure direct object references by manipulating keys under their control, bypassing authorization checks. The issue affects versions up to 2.9.0 of the plugin. The CVSS vector indicates the attack can be performed remotely without privileges or user interaction, with low attack complexity. The impact includes integrity and availability loss but no confidentiality impact. No vendor advisory or patch information is currently available.

The vulnerability enables unauthenticated attackers to bypass authorization controls, potentially allowing them to perform unauthorized actions or disrupt service availability. There is no confidentiality impact reported. The integrity and availability of the affected system may be compromised. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific mitigations or workarounds are provided by the vendor at this time.