A vulnerability classified as critical has been found in Kazaar 1.25.12. Impacted is an unknown function of the file /api/v1/org-id/orders/order-id/documents. Performing manipulation of the argument order-id results in privilege escalation.
This vulnerability is identified as CVE-2025-59686. The attack can only be performed from the local network. There is not any exploit available.
