ID:12347 - Exploit for Path traversal in CentreStack - CVE-2025-11371

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to input validation error when processing directory traversal sequences. A remote non-authenticated attacker can send a specially crafted HTTP request and read arbitrary files on the system.

Successful exploitation of the vulnerability may lead to system compromise.

Note, the vulnerability is being actively exploited in the wild. 

Remediation