The vulnerability CVE-2025-24605 involves improper limitation of a pathname to a restricted directory in the RealMag777 WOLF bulk-editor. This path traversal issue allows an attacker with high privileges to access files outside the intended directory scope, potentially leading to unauthorized file access. The affected product versions include WOLF up to 1.0.8.5. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, high confidentiality impact, no integrity or availability impact.

Successful exploitation could allow an attacker with high privileges to read files outside the designated directory, potentially exposing sensitive information. There is no indication of integrity or availability impact. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are currently available. Until a patch is released, restrict access to the bulk-editor component to trusted users with appropriate privileges and monitor for suspicious activity related to file access.