Unknown · Thingsboard · CVE-2025-9094
Name of the Vulnerable Software and Affected Versions:
ThingsBoard version 4.1
Description:
A vulnerability exists in ThingsBoard that affects unknown code within the Add Gateway Handler component. The issue involves improper neutralization of special elements used in a template engine, allowing for remote exploitation. The exploit has been publicly disclosed.
Recommendations:
Update to version 4.2 or later to resolve this issue. As a temporary workaround, consider disabling the Add Gateway Handler component until a patch is available.