The vulnerability identified as CVE-2025-27010 affects bslthemes Tastyc versions before 2.5.2. It involves a path traversal flaw using the '.../...//' sequence that enables PHP Local File Inclusion. This can allow an attacker to include and execute arbitrary local files on the server, potentially leading to complete system compromise. The CVSS 3.1 base score is 8.1, indicating high severity with network attack vector, high attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability can result in an attacker gaining unauthorized access to sensitive files and executing arbitrary code on the affected system. This compromises confidentiality, integrity, and availability of the system running Tastyc versions prior to 2.5.2. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — no official patch or remediation guidance is provided in the available data. Users should monitor the vendor's advisory channels for updates and apply any official fixes once released. Until then, restricting access to the affected application and employing web application firewalls to detect path traversal attempts may reduce risk.