CVE-2025-54768 KL-001-2025-015: Xorux LPAR2RRD Read Only User Log Download Exposing Sensitive Information

Medium 5.3 Published 28 Jul 2025 Updated 3 Nov 2025

Read-only users can access an admin-only API endpoint to download configuration logs, exposing sensitive information.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2025-54768?

CVE-2025-54768 is a medium-severity missing authorization vulnerability in Xorux LPAR2RRD, published on 28 Jul 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level read only web application users. The endpoint can be used to download logs from the appliance configuration, exposing sensitive information.

Weakness: CWE-648

Which versions are affected by CVE-2025-54768?

It affects 1 product.

Products include Xorux Lpar2rrd.

How do I fix CVE-2025-54768?

No fix has been published for CVE-2025-54768 yet. Limit exposure of the affected software until one is available.

Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.

Is CVE-2025-54768 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-54768 exists.

Sources

Also known as GHSA-9fr7-pvrj-ff37.