High severity8.8NVD Advisory· Published Jul 29, 2025· Updated Jun 17, 2026

CVE-2025-54769

Description

An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded file placed in a location of their choosing. This can be used to overwrite existing PERL modules within the application to achieve remote code execution (RCE) by an attacker.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

LPAR2RRD/LPAR2RRDllm-fuzzy
Xorux/LPAR2RRDv5
Range: 8.04

Patches

Vulnerability mechanics

References

korelogic.com/Resources/Advisories/KL-001-2025-016.txtnvdExploitThird Party Advisory
lpar2rrd.com/note800.phpnvdRelease Notes
seclists.org/fulldisclosure/2025/Jul/19nvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000