← All advisories

Medium severity6.3NVD Advisory· Published Sep 15, 2025· Updated Jun 17, 2026

CVE-2025-49089

CVE-2025-49089

Description

wangxutech MoneyPrinterTurbo 1.2.6 allows path traversal via /api/v1/download/ URIs such as /api/v1/download//etc/passwd.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Harry0703/Moneyprinterturbollm-create3 versions
<1.2.6+ 2 more
- (no CPE)range: <1.2.6
- cpe:2.3:a:harry0703:moneyprinterturbo:1.2.6:*:*:*:*:*:*:*
- (no CPE)

Patches

Vulnerability mechanics

References

3

gist.github.com/Theresasu1/3a9ced1f3d8208cc9f99ce34057cf681nvdBroken Link
moneyprinterturbo.netnvdBroken Link
www.wangxutech.comnvdNot Applicable

News mentions

0

No linked articles in our index yet.