The vulnerability CVE-2025-54031 affects Schiocco Support Board (<= 3.8.0) and arises from improper validation or control of filenames used in PHP include or require statements. This allows an attacker to perform Local File Inclusion (LFI), which can lead to disclosure of sensitive files, code execution, or other impacts depending on the server environment and configuration. The CVSS v3.1 base score is 8.1, indicating high severity with network attack vector, high impact on confidentiality, integrity, and availability, and no privileges or user interaction required.

Successful exploitation of this vulnerability can result in an attacker including arbitrary local files on the server, potentially leading to disclosure of sensitive information, execution of malicious code, and disruption of service. The high CVSS score reflects the critical impact on confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider mitigating exposure by restricting access to vulnerable endpoints, applying web application firewalls with rules to detect and block LFI attempts, and reviewing server configurations to limit file inclusion risks. Monitor vendor channels for updates and apply patches promptly once released.