← All advisories

Low severity3.8NVD Advisory· Published Aug 4, 2025· Updated Jun 17, 2026

CVE-2025-46094

CVE-2025-46094

Description

LiquidFiles before 4.1.2 allows directory traversal by configuring the pathname of a local executable file as an Actionscript.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Liquidjs/Liquidfiles3 versions
cpe:2.3:a:liquidfiles:liquidfiles:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:liquidfiles:liquidfiles:*:*:*:*:*:*:*:*range: <4.1.2
- (no CPE)range: <4.1.2
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

2

projectblack.io/blog/liquidfiles-vulnerability-authenticated-rce/nvdExploitThird Party Advisory
docs.liquidfiles.com/release_notes/version_4-1-x.htmlnvdRelease Notes

News mentions

0

No linked articles in our index yet.