CVE-2025-37168

Unauthenticated Arbitrary File Deletion Vulnerability in AOS-8 Operating System

High · published January 13, 2026

CVSS v3.1
8.2
EPSS
0%
Percentile
38.4
In the wild
Unconfirmed
What it is

🚨 An unauthenticated attacker can delete any file they find — a malicious guest tossing the owner’s prized collection of rare books into the fire. 🔥 Imagine a library where anyone can walk in and remove any book, regardless of its value. That's what this vulnerability allows in the affected system, letting malicious actors erase vital files as if they were just random titles on a shelf. If exploited, this vulnerability could lead to a catastrophic loss of critical files, potentially rendering affected devices inoperable and causing denial-of-service conditions. It's like a librarian who accidentally deletes their entire inventory — devastating!

Put simply

Imagine a library where anyone can walk in and remove any book, regardless of its value. That's what this vulnerability allows in the affected system, letting malicious actors erase vital files as if they were just random titles on a shelf. This arbitrary file deletion vulnerability in mobility conductors running the AOS-8 operating system allows unauthenticated remote actors to delete files without proper authorization, leading to possible system failures.

What to do

If exploited, this vulnerability could lead to a catastrophic loss of critical files, potentially rendering affected devices inoperable and causing denial-of-service conditions. It's like a librarian who accidentally deletes their entire inventory — devastating! To mitigate this risk, patch to the latest version of AOS-8 as soon as it's available. Additionally, review user permissions and ensure that only authenticated users can access critical system functions. You've got this! With a quick patch and a keen eye on user permissions, you can keep your system safe and sound. 🛡️

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00454 · 38.4th percentile
Published
2026-01-13T20:03Z
EPSS history
Timeline
  • 13 JAN 20:03Z
    Unauthenticated Arbitrary File Deletion Vulnerability in AOS-8 Operating System
    cvelistv5