CVE-2025-47603 describes an improper limitation of a pathname to a restricted directory (path traversal) vulnerability in Belingo's belingoGeo product, affecting versions up to 1.12.0. This vulnerability allows remote attackers to access files outside intended directories without authentication or user interaction, potentially exposing sensitive information. The CVSS 3.1 base score is 7.5, reflecting high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vulnerability impacts confidentiality but not integrity or availability.

Successful exploitation of this vulnerability can lead to unauthorized disclosure of sensitive information by allowing attackers to read files outside the intended directory scope. There is no indication that integrity or availability are affected. No known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Belingo's advisories for updates. Until a fix is available, consider restricting network access to the vulnerable service and applying any available configuration workarounds if documented by the vendor.