Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.5

Vedo Suite 2024.17: Remote File Access via Authenticated Attack

CVE-2025-51057 · published 1 year ago
Summary

A vulnerability in Vedo Suite 2024.17 allows attackers who have logged in to access any files on your computer. This could potentially allow them to read sensitive information. To protect your data, update to the latest version of Vedo Suite.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
vedo_suite_project vedo_suite 2024.17
cpe:2.3:a:vedo_suite_project:vedo_suite:2024.17:*:*:*:*:*:*:*
Original advisory text
A local file inclusion (LFI) vulnerability in Vedo Suite version 2024.17 allows remote authenticated attackers to read arbitrary filesystem files by exploiting an unsanitized 'readfile()' function ...
A local file inclusion (LFI) vulnerability in Vedo Suite version 2024.17 allows remote authenticated attackers to read arbitrary filesystem files by exploiting an unsanitized 'readfile()' function call in '/api_vedo/video/preview'.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
6.5 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-98Improper Control of Filename for Include
Timeline
Published6 Aug 2025
Updated3 Nov 2026
First seen5 Jul 2026
Sources
CVE-2025-51057 · NVD
CVE-2025-51057 · MITRE
Track software like this
Free during beta