CVE-2025-8749mediumCWE-22

CVE-2025-8749: medium-severity vulnerability in Mobile Industrial Robots MiR Robots

Path traversal vulnerability in MiR robot software via API requests

Published · Updated

Follow this CVE+ Monitor MiR Robots

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.4%
Path Traversal vulnerability in API Endpoint in Mobile Industrial Robots (MiR) Software Versions prior to 3.0.0 on MiR Robots allows authenticated users to extract files from the robot file system via a crafted API request.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
Mobile Industrial Robots · MiR Robots
Related CVEs — Mobile Industrial Robots MiR Robots

In the same product, most dangerous first.

CVE-2025-8748HIGHOS command injection in MiR robots and MiR fleet via crafted HTTP requestsEPSS 1.3%CVE-2025-9229MEDIUMInformation Disclosure in MiR robots and MiR fleet through verbose error pagesEPSS 0.3%CVE-2025-9225MEDIUMCross-site scripting (XSS) in MiR robots and MiR fleetEPSS 0.3%CVE-2025-9228MEDIUMInsufficient authorization when creating notesEPSS 0.2%