The vulnerability identified as CVE-2025-58959 affects AmentoTech Taskbot (versions up to 6.4) and involves improper limitation of a pathname to a restricted directory, commonly known as a path traversal issue. This weakness allows an attacker with low privileges and no user interaction required to cause a denial of service condition by accessing or manipulating files outside the intended directory scope. The CVSS 3.1 base score is 7.7, reflecting network attack vector, low attack complexity, required privileges, no user interaction, scope change, no confidentiality or integrity impact, but high impact on availability.

An attacker with limited privileges can exploit this vulnerability remotely without user interaction to cause denial of service by accessing or modifying files outside the intended directory boundaries. There is no direct impact on confidentiality or integrity according to the CVSS vector. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the Taskbot application to trusted users and monitor for unusual activity related to file access. Avoid exposing the vulnerable versions to untrusted networks.