The vulnerability CVE-2025-31411 in aribhour Linet ERP-Woocommerce Integration is a path traversal issue that allows an attacker with high privileges to bypass directory restrictions and access files outside the intended directory. This affects versions up to 3.5.12. The CVSS v3.1 base score is 5.9 (medium severity), reflecting network attack vector, high attack complexity, required privileges, no user interaction, and high impact on confidentiality and integrity but no impact on availability. No patch or official fix has been documented yet.

Successful exploitation could lead to unauthorized disclosure and modification of sensitive files outside the restricted directory, potentially compromising system confidentiality and integrity. Availability is not impacted. The attack requires high privileges, limiting the scope of potential attackers.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected plugin and limit high privilege accounts to trusted users only. Monitor for updates from the vendor or security advisories regarding patches or workarounds.