The vulnerability identified as CVE-2025-69055 affects SeaTheme BM Content Builder before version 3.16.3.3. It involves improper limitation of a pathname to a restricted directory, commonly known as a path traversal vulnerability. This allows an attacker with low privileges to access files outside the intended directory boundaries, potentially exposing sensitive information. The CVSS 3.1 base score is 6.5, with the vector indicating network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, and no impact on integrity or availability.

Successful exploitation of this vulnerability can lead to unauthorized disclosure of sensitive files on the affected system. There is no indication of impact on system integrity or availability. The vulnerability requires low privileges and no user interaction, making it moderately risky in environments where attackers have some level of access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor SeaTheme's advisories for updates. Until a fix is available, restricting access to the BM Content Builder and limiting user privileges may reduce exposure.