CVE-2025-0278

Summary

CVE-2025-0278 is a newly disclosed vulnerability that impacts HCL Traveler, a Windows application. The weakness allows for internal path disclosure, meaning that sensitive file paths are exposed unintentionally. This can occur through error messages, debug logs, or user requests, potentially leading to unauthorized access or further exploitation. HCL Traveler users are advised to apply the available patch or update as soon as possible to mitigate the risk. This vulnerability can enable attackers to navigate the system and access sensitive information, posing a significant security threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.