CVE-2025-6776 xiaoyunjie openvpn-cms-flask File Upload controller.py upload path traversal
Remote attackers can exploit a path traversal vulnerability in the file upload function to read or modify arbitrary files on the server.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-6776?
CVE-2025-6776 is a medium-severity path traversal vulnerability in xiaoyunjie openvpn-cms-flask, published on 27 Jun 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability classified as critical was found in xiaoyunjie openvpn-cms-flask up to 1.2.7. This vulnerability affects the function Upload of the file app/plugins/oss/app/controller.py of the component File Upload. The manipulation of the argument image leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.2.8 is able to address this issue. The name of the patch is e23559b98c8ea2957f09978c29f4e512ba789eb6. It is recommended to upgrade the affected component.
Weakness: CWE-22
Which versions are affected by CVE-2025-6776?
It affects 1 product.
Products include Xiaoyunjie Openvpn-Cms-Flask.
How do I fix CVE-2025-6776?
No fix has been published for CVE-2025-6776 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2025-6776 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-6776 exists.
Other vulnerabilities in xiaoyunjie openvpn-cms-flask
Sources
Also known as GHSA-27wr-2vmx-7hq4.