CVE-2025-69904: Path Traversal
Linkstack v4.8.4 and earlier is vulnerable to Path Traversal, which allows an administrator to read arbitrary files on the server by manipulating file path input. Successful exploitation may lead to unauthorized access to sensitive system or application files.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated Linkstack administrator can exploit it. The issue is therefore most relevant where administrator accounts are shared, compromised, or accessible to untrusted users.
What access does an attacker need?
The attacker needs administrator-level access and must be able to manipulate a file path input. The provided information does not indicate that unauthenticated users can exploit the issue.
Which versions should be considered affected?
Linkstack version 4.8.4 and earlier are affected according to the available information.
What is the potential impact?
An attacker may read arbitrary files on the server, potentially exposing sensitive operating system or application files.