CVE-2025-66687

Doom Launcher 3.8.1.0 is vulnerable to Directory Traversal due to missing file path validation during the extraction of game files

High · published March 16, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
51.7
In the wild
Unconfirmed
What it is

Doom Launcher 3.8.1.0 is vulnerable to Directory Traversal due to missing file path validation during the extraction of game files

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00676 · 51.7th percentile
Published
2026-03-16T00:00Z
EPSS history
Timeline
  • 16 MAR 00:00Z
    Doom Launcher 3.8.1.0 is vulnerable to Directory Traversal due to missing file path validation during the extraction of game files
    cvelistv5