The vulnerability CVE-2025-69080 affects JanStudio Gecko versions up to 1.9.8 and is characterized by improper control of filenames in PHP include/require statements, leading to PHP Local File Inclusion. This allows an attacker to include local files on the server, which may result in arbitrary code execution or information disclosure. The CVSS 3.1 base score is 8.1, reflecting network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. No patch or official remediation guidance is currently documented.

Successful exploitation of this vulnerability can lead to local file inclusion, which may allow attackers to execute arbitrary code, disclose sensitive information, or disrupt service on the affected system. The high CVSS score indicates a severe impact on confidentiality, integrity, and availability. However, there are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid exposing vulnerable versions to untrusted networks and consider applying temporary mitigations such as restricting file inclusion paths or disabling vulnerable functionality if possible.