CVE-2025-69620

MEDIUM

office_reader - Path Traversal and Denial of Service via Internal Storage File Write

Title source: llm

A path traversal in Moo Chan Song v4.5.7 allows attackers to cause a Denial of Service (DoS) via writing files to the internal storage.

Core 4

Core References

Not Applicable

Product

Exploit, Third Party Advisory

Not Applicable

CVSS v3 5.0

EPSS 0.0022

EPSS Percentile 12.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

CWE

CWE-22

Status published

Products (1)

ntoolslab/office_reader 4.5.7

Published Feb 04, 2026

Tracked Since Feb 18, 2026