CVE-2025-67442

High · 7.6

CVSS

7.6

EPSS

0.6%

Published

Dec 19, 2025

CISA due date

—

The record

EVE-NG 6.4.0-13-PRO is vulnerable to Directory Traversal. The /api/export interface allows authenticated users to export lab files. This interface lacks effective input validation and filtering when processing file path parameters submitted by users.

Affected packages

Ecosystem	Package	Introduced	Fixed