The vulnerability CVE-2025-50003 in axiomthemes Amuli arises from improper validation or control of filenames used in PHP include or require statements. This weakness enables PHP Local File Inclusion, allowing an attacker to cause the application to include unintended files from the local filesystem. The issue affects Amuli versions up to 2.3.0. The CVSS v3.1 base score is 8.1, reflecting high impact on confidentiality, integrity, and availability, with network attack vector, high attack complexity, no privileges required, and no user interaction needed. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to include arbitrary local files on the server running the vulnerable Amuli product. This can lead to disclosure of sensitive information, code execution, or denial of service, impacting confidentiality, integrity, and availability. The CVSS score of 8.1 indicates a high severity impact. However, no known exploits in the wild have been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to vulnerable endpoints and applying general PHP security best practices relevant to file inclusion vulnerabilities. Monitor vendor channels for updates and patches addressing this issue.