CVE-2025-69904
Received Received - Intake

Path Traversal in Linkstack v4.8.4 and Earlier

Publication date: 2026-09-11

Last updated on: 2026-09-11

Assigner: MITRE

Description
Linkstack v4.8.4 and earlier is vulnerable to Path Traversal, which allows an administrator to read arbitrary files on the server by manipulating file path input. Successful exploitation may lead to unauthorized access to sensitive system or application files.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-11
Last Modified
2026-09-11
Generated
2026-09-12
AI Q&A
2026-09-11
EPSS Evaluated
N/A
NVD
CVE-2025-69904
EUVD
EUVD-2025-210892

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linkstack linkstack to 4.8.4 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

LinkStack v4.8.4 and earlier has a Path Traversal vulnerability. This means an administrator can read arbitrary files on the server by manipulating file path input. For example, an attacker could craft a request to access sensitive files like /etc/passwd.

Detection Guidance

To detect this vulnerability, check if your LinkStack instance is running version 4.8.4 or earlier. Inspect server logs for suspicious GET requests targeting the /admin/backups endpoint with path traversal sequences like ../. Test by attempting to access sensitive files such as /etc/passwd via crafted requests to this endpoint.

Impact Analysis

If exploited, this vulnerability allows unauthorized access to sensitive system or application files. Attackers with admin privileges could steal confidential data, compromise system integrity, or gain further access to the server.

Compliance Impact

This vulnerability could lead to data breaches, violating GDPR and HIPAA requirements for protecting sensitive data. Non-compliance may result in legal penalties, fines, and reputational damage.

Mitigation Strategies

Immediately upgrade LinkStack to the latest version beyond 4.8.4. If upgrading is not possible, restrict access to the /admin/backups endpoint and monitor for unusual file access patterns. Apply input validation to sanitize file path inputs in the application.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-69904. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart