CVE-2025-26525CWE-552

Arbitrary file read risk through pdfTeX

High · published February 24, 2025

CVSS v3.1
8.6
EPSS
0%
Percentile
37.5
In the wild
Unconfirmed
What it is

Insufficient sanitizing in the TeX notation filter resulted in an

arbitrary file read risk on sites where pdfTeX is available (such as

those with TeX Live installed).

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00443 · 37.5th percentile
Weakness
CWE-552 · Files or Directories Accessible to External Parties
Published
2025-02-24T19:31Z
EPSS history
Timeline
  • 24 FEB 19:31Z
    Arbitrary file read risk through pdfTeX
    cvelistv5