High severity8.8NVD Advisory· Published Jul 29, 2025· Updated Jun 17, 2026

CVE-2025-54769

Description

An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded file placed in a location of their choosing. This can be used to overwrite existing PERL modules within the application to achieve remote code execution (RCE) by an attacker.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Xorux/LPAR2RRD2 versions
cpe:2.3:a:xorux:lpar2rrd:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:xorux:lpar2rrd:*:*:*:*:*:*:*:*range: <=8.04
- (no CPE)range: 8.04
LPAR2RRD/LPAR2RRDllm-fuzzy

Patches

Vulnerability mechanics

References

korelogic.com/Resources/Advisories/KL-001-2025-016.txtnvdExploitThird Party Advisory
lpar2rrd.com/note800.phpnvdRelease Notes
seclists.org/fulldisclosure/2025/Jul/19nvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000