PT-2025-35550 · Akinsoft · Akinsoft Octocloud

Berat Arslan · Published 2025-09-02 · Updated 2025-09-02 · CVE-2025-0640

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Akinsoft OctoCloud versions s1.09.02 through v1.11.00

Description An authorization bypass exists due to a user-controlled key, potentially leading to resource leak exposure in Akinsoft OctoCloud.

Recommendations Update Akinsoft OctoCloud to version v1.11.01 or later.

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2025-0640

Affected Products

Akinsoft Octocloud

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-0640 · Security Note
• https://usom.gov.tr/bildirim/tr-25-0203 · Note
• https://twitter.com/CVEnew/status/1962855583310041108 · Twitter Post
• https://t.me/cveNotify/134060 · Telegram Post
• https://t.me/CVEtracker/31494 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1962890804910772374 · Twitter Post