CVE-2025-58933 describes a vulnerability in the axiomthemes Anubis PHP program where improper validation or control of filenames used in include or require statements allows local file inclusion. This flaw affects Anubis versions up to 1.25 and can be exploited remotely over the network without privileges or user interaction, but with high attack complexity. Successful exploitation can lead to full compromise of confidentiality, integrity, and availability of the system running the vulnerable software. No patch or official remediation guidance is currently provided, and no known exploits have been observed in the wild.

The vulnerability allows an attacker to perform local file inclusion via manipulated include/require statements in PHP, potentially leading to disclosure of sensitive files, code execution, or system compromise. The CVSS score of 8.1 reflects a high impact on confidentiality, integrity, and availability. However, exploitation requires high attack complexity and no privileges or user interaction are needed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the affected application and monitor for unusual activity related to file inclusion attempts. Avoid exposing the vulnerable application to untrusted networks. Do not assume the vulnerability is mitigated without vendor confirmation.