CVE-2025-12250

OpenWGA 7.11.12 Build 737 is affected by a path traversal flaw in the WGA.File component of the TMLScript API. Attack requires no user interaction and can be launched remotely; an exploit has been published. The root cause is described as an incorrect manipulation within WGA.File leading to path ...