Critical · published September 7, 2025
🚨 An unauthenticated DB dump is just a click away! With FOG versions 1.5.10.1673 and below, attackers can grab your entire SQL database without breaking a sweat! 🔥 Think of this vulnerability like an unlocked filing cabinet in an office — anyone can walk in and take any document without needing a key or ID badge. The lack of authentication is the missing security guard at the entrance, allowing unauthorized access to sensitive data. An attacker could potentially extract all your database information, exposing everything from user data to sensitive inventory records. This could lead to identity theft, data breaches, or even a complete compromise of your system. The risk is absolutely devastating, especially for organizations relying on FOG for their inventory management!
Think of this vulnerability like an unlocked filing cabinet in an office — anyone can walk in and take any document without needing a key or ID badge. The lack of authentication is the missing security guard at the entrance, allowing unauthorized access to sensitive data. This authentication bypass vulnerability allows attackers to perform an unauthenticated SQL database dump, meaning they can access sensitive data without any credentials. The flaw lies in how FOG handles authentication, letting anyone access the database with a simple request.
An attacker could potentially extract all your database information, exposing everything from user data to sensitive inventory records. This could lead to identity theft, data breaches, or even a complete compromise of your system. The risk is absolutely devastating, especially for organizations relying on FOG for their inventory management! To protect your data, immediately upgrade to the latest version of either the dev-branch or the working-1.6 branch of FOG. You can find step-by-step upgrade instructions in the FOG Project documentation. Don't wait for the official patch on 9/15/2025 — act now to safeguard your system! You've got this! Follow the upgrade instructions, and you'll be one step closer to protecting your data! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| fogproject/fogproject | ≤ 1.5.10.1673 | — |