CVE-2025-65418 identifies a directory traversal vulnerability in docuFORM Managed Print Service Client 11.11c. The flaw allows an attacker to craft a URL that can traverse directories and access arbitrary files on the system where the client is installed. This could lead to unauthorized disclosure of sensitive files. The vulnerability is confirmed published but lacks a CVSS score and detailed vendor remediation information.

Successful exploitation of this vulnerability could result in unauthorized reading of arbitrary files on the affected system, potentially exposing sensitive or confidential information. There is no evidence of active exploitation in the wild. The overall impact depends on the nature of files accessible and the environment in which the client is deployed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to the affected client and monitoring for suspicious URL requests that may attempt directory traversal. Do not assume the vulnerability is mitigated without vendor confirmation.