PT-2025-52285 · Myhoard · Myhoard

Emmet Brown + 1 · Published 2025-12-18 · Updated 2026-03-05 · CVE-2025-67745

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions MyHoard versions 1.0.1 through 1.2.9

Description MyHoard is a daemon used for creating, managing, and restoring MySQL backups. In versions 1.0.1 through 1.2.9, the software may log sensitive backup information, including the encryption key. This could potentially expose backup data.

Recommendations Versions prior to 1.3.0 should be updated. As a workaround, redirect logs to /dev/null.

Exploit

Fix

Weakness Enumeration

CWE-402

Related Identifiers

CVE-2025-67745

GHSA-V42R-6HR9-4HCR

Affected Products

Myhoard

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/67xxx/CVE-2025-67745.json · Exploit
• https://github.com/Aiven-Open/myhoard/commit/fac89793bfc8c81ae040aadf5292f5d0100b6640 · Patch
• https://github.com/Aiven-Open/myhoard/security/advisories/GHSA-v42r-6hr9-4hcr · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-67745 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-67745 · Security Note
• https://twitter.com/CVEnew/status/2001736580155715783 · Twitter Post
• https://t.me/cveNotify/154375 · Telegram Post