cbcvebase.

Real Time Logic Mako Server vulnerabilities

1 known vulnerability affecting real_time_logic/mako_server.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2025-34095P1CRITICALCVSS 9.3PoC≥ 2.5, ≤ 2.62025-07-10
CVE-2025-34095 [CRITICAL] CWE-78 CVE-2025-34095: An OS command injection vulnerability exists in Mako Server versions 2.5 and 2.6, specifically withi An OS command injection vulnerability exists in Mako Server versions 2.5 and 2.6, specifically within the tutorial interface provided by the examples/save.lsp endpoint. An unauthenticated attacker can send a crafted PUT request containing arbitrary Lua os.execute() code, which is then persisted on disk and triggered via a subsequent GET request to
nvd
Real Time Logic Mako Server vulnerabilities | cvebase