Lucene search
K

CVE-2025-6773 HKUDS LightRAG File Upload document_routes.py upload_to_input_dir path traversal

๐Ÿ—“๏ธย 27 Jun 2025ย 19:00:17Reported byย VulDBTypeย 
cvelist
ย cvelist
๐Ÿ”—ย www.cve.org๐Ÿ‘ย 25ย Views

Critical path traversal vulnerability in HKUDS LightRAG file upload function requires patching.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2025-6773
27 Jun 202519:52
โ€“circl
CNNVD
LightRAG ่ทฏๅพ„้ๅކๆผๆดž
27 Jun 202500:00
โ€“cnnvd
CVE
CVE-2025-6773
27 Jun 202519:00
โ€“cve
EUVD
EUVD-2025-19421
3 Oct 202520:07
โ€“euvd
Github Security Blog
HKUDS LightRAG allows Path Traversal via function upload_to_input_dir
27 Jun 202521:30
โ€“github
NVD
CVE-2025-6773
27 Jun 202519:15
โ€“nvd
OSV
GHSA-V9W6-9HQ9-33CH HKUDS LightRAG allows Path Traversal via function upload_to_input_dir
27 Jun 202521:30
โ€“osv
Positive Technologies
PT-2025-27252 ยท Unknown ยท Hkuds Lightrag
27 Jun 202500:00
โ€“ptsecurity
RedhatCVE
CVE-2025-6773
29 Jun 202519:07
โ€“redhatcve
Snyk
Directory Traversal
27 Jun 202521:30
โ€“snyk
Rows per page
[
  {
    "vendor": "HKUDS",
    "product": "LightRAG",
    "versions": [
      {
        "version": "1.3.0",
        "status": "affected"
      },
      {
        "version": "1.3.1",
        "status": "affected"
      },
      {
        "version": "1.3.2",
        "status": "affected"
      },
      {
        "version": "1.3.3",
        "status": "affected"
      },
      {
        "version": "1.3.4",
        "status": "affected"
      },
      {
        "version": "1.3.5",
        "status": "affected"
      },
      {
        "version": "1.3.6",
        "status": "affected"
      },
      {
        "version": "1.3.7",
        "status": "affected"
      },
      {
        "version": "1.3.8",
        "status": "affected"
      }
    ],
    "modules": [
      "File Upload"
    ]
  }
]

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

27 Jun 2025 19:00Current
CVSS 24.3
CVSS 44.8
CVSS 3.15.3
CVSS 35.3
EPSS0.00051
25