CVE-2025-26014

CRITICAL

Olajowon Loggrove - Code Injection

Title source: rule

Description

A Remote Code Execution (RCE) vulnerability in Loggrove v.1.0 allows a remote attacker to execute arbitrary code via the path parameter.

Exploits (2)

gitee 4 stars
by olajowon · pythonwriteup
https://gitee.com/olajowon/loggrove/issues/IBJT1K
nomisec STUB
by vigilante-1337 · poc
https://github.com/vigilante-1337/CVE-2025-26014

References (3)

Scores

CVSS v3 9.8
EPSS 0.0193
EPSS Percentile 83.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-94
Status published
Products (1)
olajowon/loggrove 1.0
Published Feb 21, 2025
Tracked Since Feb 18, 2026