CVE-2025-49089
MEDIUM EPSS 20.7%
Published Sep 15, 20259mo ago · Modified Jun 17, 20261w ago
6.3 CVSS 3.1
Published Sep 15, 2025 9mo ago
Last Modified Jun 17, 2026 1w ago
Description
wangxutech MoneyPrinterTurbo 1.2.6 allows path traversal via /api/v1/download/ URIs such as /api/v1/download//etc/passwd.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction Required
Scope Unchanged
Confidentiality Low
Integrity Low
Availability Low
Threat Intelligence
EPSS Exploit Probability
20.7% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-22 Path Traversal Resource Mgmt
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| harry0703 | moneyprinterturbo | 1.2.6 | any |
References 4
- gist.github.com https://gist.github.com/Theresasu1/3a9ced1f3d8208cc9f99ce34057cf681
- github.com https://github.com/harry0703/MoneyPrinterTurbo
- moneyprinterturbo.net https://moneyprinterturbo.net
- wangxutech.com https://www.wangxutech.com
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.