CVE-2025-24819 A Relative Path Traversal vulnerability in Nokia MantaRay NM

Medium 5.7 Published 7 Apr 2026 Updated 7 Apr 2026

Attacker can traverse directories via improper input validation in the Software Manager application, potentially reading or modifying files.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2025-24819?

CVE-2025-24819 is a medium-severity path traversal vulnerability in Nokia MantaRay NM, published on 7 Apr 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Nokia MantaRay NM is vulnerable to a Relative Path Traversal vulnerability due to improper validation of input parameter on the file system in Software Manager application.

Weakness: CWE-23

Which versions are affected by CVE-2025-24819?

It affects 1 product.

Products include Nokia Mantaray Nm.

How do I fix CVE-2025-24819?

No fix has been published for CVE-2025-24819 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2025-24819 being exploited?

There is no known exploitation of CVE-2025-24819 in the wild and no public exploit code.

Sources

Also known as GHSA-hr6r-6h98-gh58.