The vulnerability identified as CVE-2025-49448 in Fastw3b LLC's FW Food Menu product is classified under CWE-22, which involves improper limitation of a pathname to a restricted directory, commonly known as path traversal. This flaw allows an attacker to manipulate file paths to access files and directories outside the intended restricted scope. The affected product versions include all versions up to 6.0.0. The CVSS v3.1 base score is 8.6, reflecting a high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and a scope change. The impact is primarily on availability, potentially causing denial of service. There is no vendor advisory or patch information available at this time, and no known exploits have been reported.

An attacker can exploit this vulnerability remotely without authentication or user interaction to perform path traversal, potentially causing denial of service by accessing or manipulating files outside the intended directory. The confidentiality and integrity impacts are not indicated, but availability impact is high. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround information is available, users should monitor vendor communications for updates. Until a fix is released, restricting network access to the affected application and applying compensating controls where possible may reduce exposure.