CVE-2025-2830

Summary

CVE-2025-2830 is a vulnerability in Thunderbird email client that allows an attacker to disclose sensitive information by manipulating the file name of an attachment in a multipart message. When the message is forwarded or edited as a new message, Thunderbird inadvertently reveals a directory listing of the system's /tmp directory. This issue can impact both Linux and Windows systems, and affects Thunderbird versions older than 137.0.2 and 128.9.2. Attackers could exploit this vulnerability to gain insights into the victim's system configuration or other sensitive data.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.