The vulnerability identified as CVE-2025-68902 affects AivahThemes Anona (versions up to 8.0) and involves improper limitation of a pathname to a restricted directory, commonly known as a path traversal flaw. This weakness allows an attacker to manipulate file paths to access files and directories outside the intended scope, potentially exposing sensitive data. The CVSS v3.1 base score is 7.5, reflecting a network attack vector with low complexity, no privileges required, no user interaction, and high confidentiality impact but no integrity or availability impact. No patch or official remediation information is provided in the available data.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to read sensitive files on the affected system, leading to confidentiality breaches. There is no indication of impact on integrity or availability. No known exploits have been reported, so active exploitation is not confirmed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the affected application and monitor for unusual file access patterns related to path traversal attempts.