CVE-2025-54317 Path traversal in Logpoint
An attacker with operator privileges can exploit a path traversal in Logpoint to achieve remote code execution.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2025-54317?
CVE-2025-54317 is a high-severity path traversal vulnerability in Logpoint, published on 20 Jul 2025. An attacker needs administrator access to exploit it, and only if a user opens a file or follows a link.
Official description
An issue was discovered in Logpoint before 7.6.0. An attacker with operator privileges can exploit a path traversal vulnerability when creating a Layout Template, which can lead to remote code execution (RCE).
Weakness: CWE-23
Which versions are affected by CVE-2025-54317?
How do I fix CVE-2025-54317?
No fix has been published for CVE-2025-54317 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2025-54317 being exploited?
There is no known exploitation of CVE-2025-54317 in the wild and no public exploit code.
Sources
Also known as GHSA-pq32-79qf-69q2.