CVE-2025-54769

8.8 highEPSS 3.6%

High (8.8) in xorux lpar2rrd. EPSS 3.6% chance of exploitation in the next 30 days.

An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded file placed in a location of their choosing. This can be used to overwrite existing PERL modules within the application to achieve remote code execution (RCE) by an attacker.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.6% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
CWEs: CWE-24, CWE-434, CWE-648
Published: 2025-07-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

xorux:lpar2rrd

References

https://korelogic.com/Resources/Advisories/KL-001-2025-016.txt
https://lpar2rrd.com/note800.php
http://seclists.org/fulldisclosure/2025/Jul/19

Check your stack JSON