CVE-2025-40605 Path traversal in Email Security
Attackers can access files outside restricted paths on SonicWall Email Security appliances via directory traversal sequences.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-40605?
CVE-2025-40605 is a medium-severity path traversal vulnerability in SonicWall Email Security, published on 20 Nov 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injecting crafted directory-traversal sequences (such as ../) and may access files and directories outside the intended restricted path.
Weakness: CWE-23
Which versions are affected by CVE-2025-40605?
It affects 5 products.
Products include Sonicwall Email Security Appliance 5000 Firmware, Sonicwall Email Security Appliance 5050 Firmware, Sonicwall Email Security Appliance 7000 Firmware, Sonicwall Email Security Appliance 7050 Firmware, Sonicwall Email Security Appliance 9000 Firmware.
How do I fix CVE-2025-40605?
No fix has been published for CVE-2025-40605 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2025-40605 being exploited?
There is no known exploitation of CVE-2025-40605 in the wild and no public exploit code.
Other vulnerabilities in SonicWall Email Security
Sources
Also known as GHSA-654w-wx9h-5mgg.