Cyber Resilience

CVE-2025-26013

HighPublic PoC

Published: 21 February 2025

Published
21 February 2025
Modified
13 June 2025
KEV Added
—
Patch
—
CVSS Score v3.1 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
EPSS Score 0.0026 49.3th percentile
Risk Priority 17 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-26013 is a high-severity Inclusion of Sensitive Information in Source Code (CWE-540) vulnerability in Olajowon Loggrove. Its CVSS base score is 8.2 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 49.3th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

The strongest mitigations our analysis identified are NIST 800-53 AC-3 (Access Enforcement) and AU-13 (Monitoring for Information Disclosure).

Deeper analysis

CVE-2025-26013 is an information disclosure vulnerability in Loggrove version 1.0, specifically within the read.py component. Published on 2025-02-21, the issue enables a remote attacker to obtain sensitive information. It carries a CVSS v3.1 base score of 8.2 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) and is classified under CWE-540.

The vulnerability can be exploited by any remote attacker over the network, requiring low attack complexity, no privileges, and no user interaction. Successful exploitation grants high-impact access to sensitive information, with a low integrity impact but no effect on availability.

Mitigation details are available in the referenced advisory at https://gitee.com/olajowon/loggrove/issues/IBJSXS.

EU & UK References

Vulnerability details

An issue in Loggrove v.1.0 allows a remote attacker to obtain sensitive information via the read.py component.

CWE(s)
CWE-540

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
attack.mitre.org →
Why these techniques?

Remote unauthenticated information disclosure in a public-facing Loggrove service directly enables initial access via exploitation of an exposed application.

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

CVEs Like This One

CVE-2025-26014Same product: Olajowon Loggrove
CVE-2024-38327Shared CWE-540
CVE-2026-45728Shared CWE-540

Affected Assets

olajowon
loggrove
1.0

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

SI-2 Flaw Remediation good match
prevent

Directly remediates the information disclosure flaw in the read.py component of Loggrove v1.0 by identifying, reporting, and correcting the vulnerability.

AC-3 Access Enforcement good match
prevent

Enforces approved authorizations for access to sensitive information, preventing remote attackers from exploiting the read.py component without privileges.

AU-13 Monitoring for Information Disclosure good match
detect

Monitors system components for indications of information disclosure, enabling detection of exploitation attempts via the read.py vulnerability.

References