The vulnerability CVE-2025-69411 in ionCube tester plus arises from improper limitation of pathname to a restricted directory, enabling path traversal attacks. This allows an attacker to potentially read arbitrary files on the affected system by manipulating file paths. The affected versions include all versions up to 1.3. The CVSS 3.1 score of 7.5 reflects a high severity with network attack vector, no privileges or user interaction required, and confidentiality impact only.

Successful exploitation could allow an attacker to read sensitive files outside the intended directory scope, potentially exposing confidential information. There is no indication of integrity or availability impact. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, restricting access to the affected application and limiting exposure to untrusted networks may reduce risk.