PT-2025-30214 · Logpoint · Logpoint

Kripa Thapa · Published 2025-07-20 · Updated 2025-07-20 · CVE-2025-54317

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Logpoint versions prior to 7.6.0

Description An issue exists in Logpoint that allows an attacker with operator privileges to exploit a path traversal vulnerability when creating a Layout Template. Successful exploitation can lead to remote code execution (RCE).

Recommendations Update Logpoint to version 7.6.0 or later.

Fix

RCE

Relative Path Traversal

Weakness Enumeration

CWE-23

Related Identifiers

CVE-2025-54317

Affected Products

Logpoint

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-54317 · Security Note
• https://servicedesk.logpoint.com/hc/en-us/articles/28685507675549-Path-Traversal-in-Layout-Templates-Allows-Remote-Code-Execution · Note
• https://t.me/cvetracker/28287 · Telegram Post
• https://servicedesk.logpoint.com/hc/en-us/sections/7201103730845-Product-Security · Note
• https://twitter.com/CVEnew/status/1947011958948999569 · Twitter Post
• https://t.me/cvenotify/129624 · Telegram Post