CVE-2025-62189

None

CVSS

—

EPSS

0.2%

Published

Nov 21, 2025

CISA due date

—

The record

LogStare Collector contains an incorrect authorization vulnerability in UserRegistration. If exploited, a non-administrative user may create a new user account by sending a crafted HTTP request.

Affected packages

Ecosystem	Package	Introduced	Fixed