PT-2025-32358 · Migoxlab · Lmeterx

Zznq · Published 2025-08-08 · Updated 2025-08-08 · CVE-2025-8729

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions MigoXLab LMeterX version 1.2.0

Description A vulnerability exists in MigoXLab LMeterX 1.2.0 related to path traversal. The process cert files function within the backend/service/upload service.py file is affected. Manipulation of the task id argument can lead to a path traversal attack, which can be launched remotely. The exploit has been publicly disclosed.

Recommendations Apply the patch with identifier f1b00597e293d09452aabd4fa57f3185207350e8 to resolve this issue.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-8729

Affected Products

Lmeterx

References · 12

• 🔥 https://github.com/MigoXLab/LMeterX/issues/10#issue-3255375024 · Exploit
• 🔥 https://github.com/MigoXLab/LMeterX/issues/10 · Exploit
• 🔥 https://vuldb.com/?submit.621741 · Exploit
• https://github.com/MigoXLab/LMeterX/issues/10#issuecomment-3136380379 · Patch
• https://github.com/MigoXLab/LMeterX/commit/f1b00597e293d09452aabd4fa57f3185207350e8 · Patch
• https://osv.dev/vulnerability/CVE-2025-8729 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-8729 · Security Note
• https://vuldb.com/?ctiid.319225 · Note
• https://vuldb.com/?id.319225 · Note
• https://t.me/CVEtracker/29504 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1953826167552708890 · Twitter Post
• https://twitter.com/CVEnew/status/1953823395860070405 · Twitter Post