The vulnerability CVE-2025-26752 affects videowhisper Broadcast Live Video versions up to 6.2 and involves improper limitation of a pathname to a restricted directory, commonly known as a path traversal flaw. This allows an attacker to traverse directories and potentially access or affect files outside the intended directory scope. According to the CVSS vector (8.6, AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H), the vulnerability is remotely exploitable without privileges or user interaction, causes a change in scope, and impacts availability but not confidentiality or integrity.

An attacker can exploit this vulnerability remotely without authentication to cause a denial of service condition, impacting the availability of the Broadcast Live Video service. There is no direct impact on confidentiality or integrity according to the CVSS metrics. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is available at this time. Users should monitor vendor communications for updates and consider restricting access to the affected software until a patch is released.