CVE-2025-67079: Malicious File Upload
Published Jan 15, 2026
·Updated
File upload vulnerability in Omnispace Agora Project before 25.10 allowing attackers to execute code through the MSL engine of the Imagick library via crafted PDF file to the file upload and thumbnail functions.
Affected Software
2 affected components
Omnispace Agora Project<25.10
Agora-Project Agora-Project<25.10
Event History
Jan 15, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-67079?
CVE-2025-67079 is rated as a critical vulnerability due to its ability to allow remote code execution.
2
How do I fix CVE-2025-67079?
To fix CVE-2025-67079, upgrade to version 25.10 or later of the Omnispace Agora Project.
3
What types of attacks are possible with CVE-2025-67079?
CVE-2025-67079 allows attackers to execute arbitrary code by uploading specially crafted PDF files.
4
Which library is affected by CVE-2025-67079?
CVE-2025-67079 affects the Imagick library used for image processing in the Omnispace Agora Project.
5
Does CVE-2025-67079 affect prior versions of Omnispace Agora Project?
Yes, CVE-2025-67079 affects all versions of Omnispace Agora Project prior to 25.10.