CVE-2025-29085

Summary

CVE-2025-29085 is a newly discovered SQL injection vulnerability affecting the vipshop Saturn v.3.5.1 and older versions. This issue allows remote attackers to execute arbitrary code through the /console/dashboard/executorCount?zkClusterKey component. By injecting malicious SQL queries, an adversary can manipulate the database and potentially gain unauthorized access or cause significant damage to the targeted system. This vulnerability poses a significant risk and requires immediate attention from system administrators and developers to apply the necessary patches and secure their databases.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.