What is CVE-2025-54379?

CVE-2025-54379 is a critical-severity vulnerability in Lf-edge Ekuiper, classified under SQL Injection. CVSS score: 9.8/10. Published 2025-07-24.

How severe is CVE-2025-54379?

Critical severity. CVSS v3 base score is 9.8 out of 10.

SQL Injection in Lf-edge Ekuiper

CVE-2025-54379

LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices. In versions before 2.2.1, there is a critical SQL Injection vulnerability in the getLast API functionality of the…

Vulnerability class: SQL Injection

EPSS: 0.008 (50.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Lf-edge Ekuiper — versions < 2.2.1
Lfedge Ekuiper — versions 2.1.5

Weakness classification (CWE)

CWE-89 — SQL Injection

References

security-advisories@github.com (x_refsource_CONFIRM, Exploit, Vendor Advisory)
security-advisories@github.com (Patch, x_refsource_MISC)

Frequently asked questions

What is CVE-2025-54379?: CVE-2025-54379 is a critical-severity vulnerability in Lf-edge Ekuiper, classified under SQL Injection. CVSS score: 9.8/10. Published 2025-07-24.
How severe is CVE-2025-54379?: Critical severity. CVSS v3 base score is 9.8 out of 10.