CVE Daily

CVE-2025-8749

Path Traversal vulnerability in API Endpoint in Mobile Industrial Robots (MiR) S...

Medium CVSS 6.5

Overview

Path Traversal vulnerability in API Endpoint in Mobile Industrial Robots (MiR) Software Versions prior to 3.0.0 on MiR Robots allows authenticated users to extract files from the robot file system via a crafted API request.

CWE: CWE-22 Published: 2025-08-08T12:15:29.527
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 6.5 (MEDIUM)
  • Detected tags: path (tag impact: MODERATE)

Recommended actions:

  • Canonicalize path; block `..` traversal; use allowlists.

Recommended tools

Tags