The vulnerability CVE-2025-68554 in zozothemes Keenarch allows an attacker with low privileges to upload files of dangerous types without restriction. This can lead to execution of malicious code or other severe impacts on the system. The issue affects all versions before 2.0.1. The CVSS 3.1 base score is 9.9, reflecting network attack vector, low attack complexity, no user interaction, and complete compromise of confidentiality, integrity, and availability. No patch or official fix information is currently available, and the product is not a cloud service.

Successful exploitation can lead to full system compromise including loss of confidentiality, integrity, and availability due to the ability to upload and potentially execute malicious files. This can result in unauthorized access, data breaches, or service disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict file upload permissions to trusted users only and implement additional file validation controls if possible. Monitor for suspicious file uploads and consider disabling file upload functionality if not required.