CVE-2025-68912 describes an improper limitation of a pathname to a restricted directory (path traversal) vulnerability in Harmonic Design HDForms (versions <= 1.6.1). This flaw allows remote attackers to access files outside the intended directory structure, potentially causing denial of service or disruption of availability. The CVSS 3.1 base score is 8.6 (high), with network attack vector, low attack complexity, no privileges or user interaction required, and a scope change. The vulnerability impacts availability but not confidentiality or integrity. No patch or vendor advisory is provided in the data.

The vulnerability can be exploited remotely without authentication or user interaction, potentially leading to denial of service or disruption of the affected system's availability. There is no direct impact on confidentiality or integrity reported. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Harmonic Design's advisories for updates. Until a fix is available, consider restricting access to the HDForms application and applying any recommended configuration changes from the vendor once available.