A vulnerability marked as critical has been reported in eTimeTrackLite Web up to 12.0. Affected is an unknown function. The manipulation leads to permission issues.

This vulnerability is documented as CVE-2025-60291. The attack requires being on the local network. There is not any exploit available.