This vulnerability (CWE-22) in Sizam Design Rehub allows an attacker with high privileges and network access to perform a path traversal attack, enabling PHP Local File Inclusion. The issue affects versions up to 19.6.1 and can lead to full system compromise as indicated by the CVSS 3.1 vector (AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H). The vulnerability is publicly disclosed but lacks an official fix or vendor advisory detailing remediation steps.

Successful exploitation can lead to full confidentiality, integrity, and availability compromise of the affected system. The attacker can include local files via PHP, potentially executing arbitrary code or accessing sensitive information. The CVSS score of 8 reflects a high impact with complex attack conditions requiring high privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected application to trusted users only and monitor for suspicious activity. Avoid exposing the vulnerable application to untrusted networks. Do not assume the vulnerability is mitigated without vendor confirmation.