CVE-2025-25206
CVSS 3.1 Score 8.3 of 10 (high)
Details
Summary
CVE-2025-25206 is a vulnerability affecting the open-source electronic lab notebook software, eLabFTW. In versions prior to 5.1.15, an incorrect input validation issue was identified. This issue grants authenticated users the ability to read sensitive data, potentially exposing login tokens or database content. If cookies are enabled (default setting), this vulnerability could lead to privilege escalation. To mitigate this risk, users are advised to upgrade to the latest version, eLabFTW 5.1.15, which includes a fix for the issue. No known workarounds are available.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.