CVE-2025-54564

The ChargePoint Home Flex electric vehicle charging device, specifically version 5.5.4.13 , is vulnerable to command execution as the nobody user . The root cause is a failure to validate a user-controlled string during bz2 decompression within the uploadsm component. This vulnerability stems fro...