← back
CVE-2025-67076

CVE-2025-67076

CVSS 7.5 HIGHEPSS 0.8%CWE-22
Directory traversal vulnerability in Omnispace Agora Project before 25.10 allowing unauthenticated attackers to read files on the system via the misc controller and the ExternalGetFile action. Only files with an extension can be read.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://www.agora-project.nethttps://www.helx.io/blog/advisory-agora-project/