CVE-2025-8590 is a vulnerability classified under CWE-200 (Exposure of Sensitive Information) affecting the SKSPro product by AKCE Software Technology R&D Industry and Trade Inc. The issue arises from directory indexing being enabled, which allows unauthorized actors to browse directories and access sensitive information. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity, with an attack vector of network, low attack complexity, no privileges required, and no user interaction needed. The impact is high confidentiality loss without affecting integrity or availability. The affected versions include SKSPro up to 07012026. There are no patch links or vendor advisories provided, and the product is not a cloud service.

The vulnerability allows an attacker to gain unauthorized access to sensitive information by exploiting directory indexing in SKSPro. This results in a high confidentiality impact, potentially exposing sensitive data to unauthorized parties. There is no impact on data integrity or system availability. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround information is provided, users should monitor the vendor's communications for updates. Until a fix is available, consider disabling directory indexing on affected SKSPro installations if configurable, to reduce exposure.