The vulnerability identified as CVE-2025-68901 affects AivahThemes Anona (versions up to 8.0) and involves improper limitation of a pathname to a restricted directory, commonly known as a path traversal flaw. This weakness enables an attacker to manipulate file paths to access resources outside the designated directory boundaries. The CVSS v3.1 score is 8.6, indicating high severity, with network attack vector, low attack complexity, no privileges or user interaction required, and a scope change. The impact is limited to availability, with no confidentiality or integrity loss reported. No vendor patch or advisory is currently provided, and no exploits are known in the wild.

An attacker can exploit this path traversal vulnerability to access files outside the intended directory, potentially causing denial of service (availability impact). There is no reported impact on confidentiality or integrity. The vulnerability is remotely exploitable without authentication or user interaction. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is available, monitor the vendor's communications for updates. Until a fix is released, consider restricting access to the affected application and applying any available workarounds recommended by the vendor once published.