CVE-2025-52692

High · 8.8

CVSS

8.8

EPSS

6.4%

Published

Dec 19, 2025

CISA due date

—

The record

Successful exploitation of the vulnerability could allow an attacker with local network access to send a specially crafted URL to access certain administration functions without login credentials.

Affected packages

Ecosystem	Package	Introduced	Fixed