CVE-2025-58931 is a vulnerability in axiomthemes Palatio (versions <= 1.6) caused by improper control of filenames in PHP include/require statements. This leads to a Local File Inclusion vulnerability, allowing an attacker to include arbitrary files on the server. The CVSS 3.1 base score is 8.1 (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating network exploitable with high impact on confidentiality, integrity, and availability. No patch or vendor advisory is currently available, and no exploits are known in the wild. The vulnerability affects the product directly and is not related to cloud services.

Successful exploitation of this vulnerability could allow an attacker to include and execute arbitrary local files on the affected server, potentially leading to full compromise of the system's confidentiality, integrity, and availability. This could result in unauthorized data access, code execution, or denial of service. The high CVSS score reflects the severity of these impacts. However, no known exploits have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users of axiomthemes Palatio should monitor the vendor's communications closely. Until a patch is available, consider restricting access to the affected application and applying any recommended configuration changes from the vendor to mitigate risk.