VYPR
Medium severity6.5NVD Advisory· Published Aug 6, 2025· Updated Jul 5, 2026

CVE-2025-51054

CVE-2025-51054

Description

Vedo Suite 2024.17 is vulnerable to Incorrect Access Control, which allows remote attackers to obtain a valid high privilege JWT token without prior authentication via sending an empty HTTP POST request to the /autologin/ API endpoint.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.