VYPR
Unrated severityNVD Advisory· Published Aug 6, 2025· Updated Aug 6, 2025

CVE-2025-51054

CVE-2025-51054

Description

Vedo Suite 2024.17 is vulnerable to Incorrect Access Control, which allows remote attackers to obtain a valid high privilege JWT token without prior authentication via sending an empty HTTP POST request to the /autologin/ API endpoint.

Affected products

2
  • Vedo Suite/Vedo Suitedescription
  • Vedo/Vedo Suitellm-create
    Range: = 2024.17

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.