The vulnerability identified as CVE-2025-69057 affects the Edge-Themes Eldon product and involves improper control of filenames in PHP include or require statements. This flaw enables PHP Local File Inclusion, which can allow an attacker to include unauthorized files on the server. The vulnerability affects versions up to 1.0 of Eldon. The CVSS v3.1 base score is 8.1, indicating high severity with network attack vector, high attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. No known exploits in the wild or patch information is currently available.

Successful exploitation of this vulnerability can lead to local file inclusion, potentially allowing an attacker to read sensitive files, execute arbitrary code, or disrupt service, impacting confidentiality, integrity, and availability of the affected system. The CVSS score of 8.1 reflects a high impact level.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Edge-Themes advisories for updates. Until a fix is available, consider restricting access to vulnerable endpoints and applying web application firewall rules to detect and block suspicious include/require requests.