CVE-2025-69143 is an unauthenticated local file inclusion vulnerability affecting ThemeREX Mission versions <= 1.22. It stems from improper control of filenames used in PHP include or require statements (CWE-98), enabling remote file inclusion attacks. The CVSS 3.1 base score is 8.1, reflecting high impact on confidentiality, integrity, and availability with network attack vector, high attack complexity, and no privileges or user interaction required. No vendor advisory or patch is currently available, and the vulnerability is not related to a cloud service.

Successful exploitation of this vulnerability can lead to full compromise of the affected system, including disclosure of sensitive information, modification of data, and denial of service. The attacker does not require authentication and can exploit the vulnerability remotely over the network. The high CVSS score indicates severe impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected application and monitor for suspicious activity related to file inclusion attempts. Avoid exposing the vulnerable application to untrusted networks if possible.