high8.8Public exploit code
CVE-2025-54769
An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded file placed in a location of their choosing.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- LPAR2RRD 8.04 - Remote Code Execution (RCE)2025-08-03 · webapps · multiple
Impact
An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded file placed in a location of their choosing. This can be used to overwrite existing PERL modules within the application to achieve remote code execution (RCE) by an attacker.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xorux | Lpar2rrd | through 8.04 |