The vulnerability identified as CVE-2025-49297 affects Mikado-Themes Grill and Chow versions up to 1.6. It involves a path traversal flaw where the input '.../...//' can be used to perform PHP Local File Inclusion. This allows an attacker to include and execute arbitrary local files on the server, potentially leading to full system compromise. The CVSS 3.1 score of 8.1 reflects a network attack vector with high impact on confidentiality, integrity, and availability, though it requires high attack complexity and no privileges or user interaction.

Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to include and execute arbitrary local files on the affected system, leading to full compromise of the application and potentially the underlying server. This impacts confidentiality, integrity, and availability of the system. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or workaround information is currently available. Users should monitor Mikado-Themes communications for updates and consider restricting access to the affected application until a fix is released.