This report concerns a Local File Inclusion vulnerability in Prodigy Commerce version 3.3.0, specifically affecting version 3.2.9. LFI vulnerabilities enable attackers to include files from the local server, which can lead to sensitive data exposure or facilitate remote code execution under certain conditions. The data does not provide details on exploitation methods or confirm active exploitation. No patch or remediation information is provided, and no known exploits have been observed in the wild.

The Local File Inclusion vulnerability could allow an attacker to read sensitive files on the server or potentially escalate to remote code execution depending on the server configuration and included files. This can compromise the confidentiality and integrity of the affected system. However, no active exploitation has been reported, and the exact impact depends on the environment and usage.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to vulnerable endpoints and validate or sanitize user inputs to prevent file inclusion. Monitor official Prodigy Commerce channels for updates and apply patches promptly once released.