CVE-2025-29846CWE-22path-traversal

CVE-2025-29846

High · published December 4, 2025

CVSS v3.1
7.2
EPSS
1%
Percentile
50.1
In the wild
Unconfirmed
What it is

⚡ Remote authenticated users can peek behind the curtain and see the status of installed packages in Portenable CGI! This vulnerability opens a door to sensitive information that shouldn't be shared. 🔍 Think of it like a hotel guest looking into the staff room to check what supplies are in stock. Just because they have a key to the building doesn’t mean they should know the details about everything behind the scenes! If an attacker exploits this, they can gather sensitive information about installed packages, potentially leading to further attacks or exposing vulnerabilities within your system. This could ultimately jeopardize the entire application and create a ripple effect of security concerns that could be absolutely devastating for your operations.

Put simply

Think of it like a hotel guest looking into the staff room to check what supplies are in stock. Just because they have a key to the building doesn’t mean they should know the details about everything behind the scenes! This vulnerability allows remote authenticated users to access the status of installed packages through Portenable CGI, which can reveal critical details about the system's configuration and underlying software.

What to do

If an attacker exploits this, they can gather sensitive information about installed packages, potentially leading to further attacks or exposing vulnerabilities within your system. This could ultimately jeopardize the entire application and create a ripple effect of security concerns that could be absolutely devastating for your operations. Immediately apply the latest patch for Portenable CGI and review user permissions to ensure only necessary individuals have access. Regularly audit your authentication methods and package management practices to minimize exposure. You've got this! Stay proactive and secure your systems, and soon you'll be wearing that superhero cape! 🦸‍♂️

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00641 · 50.1th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2025-12-04T20:15Z
Affected products (14)
ProductVersionsFixed in
synology/router_manager≥ 1.3, < 1.3.1-93461.3.1-9346
synology/router_managerall versions—
synology/router_managerall versions—
synology/router_managerall versions—
synology/router_managerall versions—
synology/router_managerall versions—
synology/router_managerall versions—
synology/router_managerall versions—
synology/router_managerall versions—
synology/router_managerall versions—
synology/router_managerall versions—
synology/router_managerall versions—
synology/router_managerall versions—
synology/router_managerall versions—
References (1)
EPSS history
Timeline
  • 04 DEC 15:01Z
    A vulnerability in portenable cgi allows remote authenticated users to get the status of installed packages
    cvelistv5