Path Traversal in Ni Labview
CVE-2025-12097
There is a relative path traversal vulnerability in the NI System Web Server that may result in information disclosure. Successful exploitation requires an attacker to send a specially crafted request to the NI System Web Server, allowing the attacker to read arbitrary files. This vulnerability existed in the NI System Web Server 2012 and prior versions. It was fixed in 2013.
EPSS: 0.006 (42.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Ni Labview — versions 9.0.0
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2025-12097?
- CVE-2025-12097 is a high-severity vulnerability in Ni Labview, classified under Relative Path Traversal. CVSS score: 7.5/10. Published 2025-12-04.
- How severe is CVE-2025-12097?
- High severity. CVSS v3 base score is 7.5 out of 10.
- Is CVE-2025-12097 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.