CVE-2025-43951

9.8 criticalEPSS 0.5%

Critical (9.8). EPSS 0.5% chance of exploitation in the next 30 days.

LabVantage before LV 8.8.0.13 HF6 allows local file inclusion. Authenticated users can retrieve arbitrary files from the environment via the objectname request parameter.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
CWE: CWE-73
Published: 2025-04-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2025-43951
https://www.labvantage.com/informatics/lims/

Check your stack JSON