Unrated

Directory traversal vulnerability in Omnispace Agora Project before 25.10 allowing unauthenticated attackers to read files on the system via the misc...

CVE-2025-67076 First seen on SecPulse Jan 15, 09:00

Original description The description as published by the source.

Directory traversal vulnerability in Omnispace Agora Project before 25.10 allowing unauthenticated attackers to read files on the system via the misc controller and the ExternalGetFile action. Only files with an extension can be read.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
advisory helx.io
web agora-project.net

Key facts

Severity: Unrated
Published: Jan 15, 2026
First seen on SecPulse: Jan 15, 09:00

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:12