The vulnerability identified as CVE-2025-46527 affects LikeCoin Web3Press through improper limitation of a pathname to a restricted directory, commonly known as a path traversal issue. This allows an attacker with low privileges to potentially read sensitive files outside the intended directory scope. The affected versions include all releases up to 3.2.0. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, required privileges, no user interaction, unchanged scope, high confidentiality impact, and no integrity or availability impact. No vendor advisory or patch information is currently available.

An attacker with low privileges can exploit this vulnerability remotely to access sensitive files outside the intended directory restrictions, potentially leading to unauthorized disclosure of confidential information. There is no indication of impact on integrity or availability. No known exploits have been reported in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected application and monitor for suspicious activity related to path traversal attempts. Avoid exposing the vulnerable service to untrusted networks if possible.