The vulnerability CVE-2025-52723 affects the codesupplyco Networker product up to version 1.2.0. It arises from improper validation or control of filenames used in PHP include or require statements, resulting in a PHP Local File Inclusion (LFI) vulnerability. This can allow an attacker to include and execute arbitrary local files on the server, potentially leading to full compromise of the system. The CVSS 3.1 vector indicates network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability can lead to disclosure of sensitive information, unauthorized modification of data, and disruption of service on the affected Networker installations. The high CVSS score reflects the critical nature of these impacts. However, no known exploits are reported in the wild as of the published date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, restricting access to the vulnerable application and applying any recommended configuration changes by the vendor may help reduce risk.