The vulnerability CVE-2025-58943 in axiomthemes Agricola (<= 1.1.0) is caused by improper control over the filename parameter in PHP include/require statements, leading to PHP Local File Inclusion. This flaw can be exploited remotely over the network without privileges or user interaction but requires high attack complexity. Successful exploitation can result in complete compromise of confidentiality, integrity, and availability of the affected system. No vendor patch or mitigation guidance is currently provided, and no known exploits have been reported.

Successful exploitation of this vulnerability can lead to full compromise of the affected system's confidentiality, integrity, and availability. An attacker could potentially include arbitrary files, which may allow code execution or disclosure of sensitive information. The CVSS score of 8.1 reflects the high impact but notes that exploitation complexity is high and no privileges or user interaction are required.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to vulnerable versions and applying any available workarounds recommended by the vendor. Monitor vendor channels for updates regarding patches or mitigations.