What is CVE-2025-67076?

CVE-2025-67076 is a high-severity vulnerability in Agora-project, classified under Path Traversal. CVSS score: 7.5/10. Published 2026-01-15.

How severe is CVE-2025-67076?

High severity. CVSS v3 base score is 7.5 out of 10.

Path Traversal in Agora-project

CVE-2025-67076

Directory traversal vulnerability in Omnispace Agora Project before 25.10 allowing unauthenticated attackers to read files on the system via the misc controller and the ExternalGetFile action. Only files with an extension can be read.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.008 (52.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Agora-project
N/a — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal

References

cve@mitre.org (Product)
cve@mitre.org (Third Party Advisory)

Frequently asked questions

What is CVE-2025-67076?: CVE-2025-67076 is a high-severity vulnerability in Agora-project, classified under Path Traversal. CVSS score: 7.5/10. Published 2026-01-15.
How severe is CVE-2025-67076?: High severity. CVSS v3 base score is 7.5 out of 10.