PT-2025-14856 · M Files · M-Files Server

Published 2025-04-04 · Updated 2025-09-30 · CVE-2025-3086

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions M-Files Server versions prior to 25.3.14549

Description The issue is related to improper isolation of users, allowing an anonymous user to affect other anonymous users' views and potentially cause a denial of service. This could lead to unauthorized access to information or disruption of service.

Recommendations For versions prior to 25.3.14549, update to version 25.3.14549 or later to resolve the issue.

Fix

DoS

Weakness Enumeration

CWE-653

Related Identifiers

CVE-2025-3086

Affected Products

M-Files Server

References · 9

• https://empower.m-files.com/security-advisories/CVE-2025-3086 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-3086 · Security Note
• https://osv.dev/vulnerability/CVE-2025-3086 · Vendor Advisory
• https://product.m-files.com/security-advisories/cve-2025-3086 · Vendor Advisory
• https://t.me/cvenotify/117709 · Telegram Post
• https://t.me/cvedetector/22088 · Telegram Post
• https://twitter.com/CVEnew/status/1908072000871878724 · Twitter Post
• https://t.me/cveNotify/137018 · Telegram Post
• https://t.me/cvetracker/20796 · Telegram Post