The vulnerability CVE-2025-14018 affects e-Fatura software from NetBT Consulting Services Inc. prior to version 1.2.15. It is classified as an unquoted search path or element vulnerability (CWE-428), which can be exploited by an attacker with local access and low privileges to manipulate the search path for configuration files or libraries. This manipulation can result in redirecting the application to load malicious libraries or configurations, potentially compromising confidentiality and integrity of the system. The CVSS v3.1 score is 7.3, reflecting high severity with attack vector local, low attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality and integrity, with low impact on availability. No patch or official remediation information is currently available.

An attacker with local access and low privileges can exploit this vulnerability to manipulate configuration file search paths or redirect library loading, potentially leading to unauthorized disclosure or modification of sensitive information (high confidentiality and integrity impact). The availability impact is low. There are no known exploits in the wild reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users only and monitor for suspicious activity related to configuration or library loading. Avoid running the affected software with elevated privileges where possible.