Medium severity5.3NVD Advisory· Published Aug 14, 2025· Updated Jun 17, 2026

CVE-2025-48861

Description

A vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed a remote, unauthenticated attacker to access and extract internal application data, including potential debug logs and the version of installed apps.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Bosch/ctrlX OSllm-fuzzy

Patches

Vulnerability mechanics

References

psirt.bosch.com/security-advisories/BOSCH-SA-129652.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000