Medium severity5.9OSV Advisory· Published Aug 20, 2025· Updated Apr 15, 2026
CVE-2025-8415
CVE-2025-8415
Description
A vulnerability was found in the Cryostat HTTP API. Cryostat's HTTP API binds to all network interfaces, allowing possible external visibility and access to the API port if Network Policies are disabled, allowing an unauthenticated, malicious attacker to jeopardize the environment.
Affected products
1- Range: v4.0.0, v4.0.0-pre, v4.0.1, …
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5News mentions
0No linked articles in our index yet.