CVE-2025-29846

High · 7.2

CVSS

7.2

EPSS

0.6%

Published

Dec 4, 2025

CISA due date

—

The record

A vulnerability in portenable cgi allows remote authenticated users to get the status of installed packages.

Ecosystem	Package	Introduced	Fixed