CVE-2025-59181 is a directory traversal vulnerability affecting Ericsson Packet Core Controller (PCC) versions before 1.39. It involves improper handling of path traversal sequences ('.../...//') in the Configuration Management functionality, enabling an attacker with high privileges to alter directory permissions. This could result in denial of access for legitimate users. The vulnerability has a CVSS 4.8 (medium) score, indicating limited impact and requiring high privileges for exploitation. No official fix or patch has been announced as of the published date.

An attacker with high privileges could exploit this vulnerability to change directory permissions within the Configuration Management component of Ericsson PCC, potentially causing denial of access to legitimate users. The impact is limited to permission changes and does not include remote code execution or data confidentiality breaches according to available data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch has been published, monitor Ericsson's advisories for updates. Until a patch is available, restrict access to Configuration Management functions to trusted administrators only to reduce risk.