CVE-2025-52395

A security vulnerability exists in Roadcute API v.1 (also referred to as Roadcube API) involving a password reset API endpoint . The root cause is a failure to properly validate the identity of the requester, which allows a remote attacker to achieve arbitrary code execution . The vulnerability i...