CVE-2025-52395

A vulnerability in Roadcute API v.1 allows a remote attacker to achieve arbitrary code execution . The root cause is a password reset API endpoint that fails to properly validate the identity of the requester. The documents do not provide information regarding specific exploit code or a patched v...