CVE-2025-6919 is an SQL Injection vulnerability (CWE-89) in the Aykome License Tracking System by Cats Information Technology Software Development Technologies. It affects versions prior to the release dated 06.10.2025. The vulnerability arises from improper neutralization of special elements in SQL commands, allowing an attacker to manipulate backend database queries. The CVSS 3.1 base score is 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating that the vulnerability is remotely exploitable without privileges or user interaction and can lead to full compromise of confidentiality, integrity, and availability of the system.

Successful exploitation of this vulnerability can lead to unauthorized disclosure, modification, or deletion of data within the affected system. It can also result in complete system compromise due to the high severity and critical CVSS score. The vulnerability affects all versions of the Aykome License Tracking System before the version dated 06.10.2025.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix links are provided, users should monitor Cats Information Technology Software Development Technologies' advisories for updates. Until a fix is available, consider applying input validation, parameterized queries, or other SQL injection mitigations if possible within the environment.