CVE-2025-8356 Path Traversal leading to RCE
An attacker can exploit a path traversal vulnerability in Xerox FreeFlow Core to access unauthorized files and execute arbitrary code on the server.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-8356?
CVE-2025-8356 is a critical path traversal vulnerability in Xerox FreeFlow Core, published on 8 Aug 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In Xerox FreeFlow Core version 8.0.4, an attacker can exploit a Path Traversal vulnerability to access unauthorized files on the server. This can lead to Remote Code Execution (RCE), allowing the attacker to run arbitrary commands on the system.
Which versions are affected by CVE-2025-8356?
It affects 1 product.
Products include Xerox Freeflow Core.
How do I fix CVE-2025-8356?
No fix has been published for CVE-2025-8356 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2025-8356 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-8356 exists.
Other vulnerabilities in Xerox FreeFlow Core
Sources
Also known as GHSA-6rpm-hqp2-mf48.