This vulnerability (CVE-2025-64235) in AmentoTech Tuturn is classified as CWE-22, involving improper limitation of a pathname to a restricted directory, commonly known as a path traversal issue. It affects versions prior to 3.6 of the product. The flaw allows an attacker with low privileges to read files outside the intended directory scope, potentially exposing sensitive information. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, and no impact on integrity or availability.

An attacker with low privileges can exploit this vulnerability to access sensitive files outside the restricted directory, leading to a confidentiality breach. There is no impact on system integrity or availability. No known exploits have been reported in the wild to date.

No patch or official fix is currently available for this vulnerability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, restrict access to the affected application and monitor for suspicious activity related to file access attempts.