CVE-2025-48081 is a CWE-35 path traversal vulnerability affecting Printeers Print & Ship versions up to 1.17.0. The issue arises from improper handling of the path sequence '.../...//', enabling an attacker to traverse directories beyond the intended scope. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity, no privileges or user interaction required, and an impact limited to integrity loss only. No patch or vendor advisory is currently available, and the product is not a cloud service.

The vulnerability allows an attacker to manipulate file paths to potentially alter or overwrite files outside the intended directory, impacting the integrity of the system. There is no impact on confidentiality or availability according to the CVSS vector. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are available, users should monitor vendor communications for updates. Until a patch is released, consider restricting access to the affected application and validating input paths where possible to mitigate exploitation risk.