CVE-2025-8749

Path Traversal vulnerability in API Endpoint in Mobile Industrial Robots (MiR) Software Versions prior to 3.0.0 on MiR Robots allows authenticated users to extract files from the robot file system via a crafted API request.

Score

CVSS 3.1 6.5 Medium

Status

Deferred - 1b7e193f-2525-49a1-b171-84af8827c9eb

Published

2025-08-08

Last modified

2025-11-05

Weaknesses

CWE-22

Affected products

• Mir Robots (Mobile Industrial Robots)

References

• https://mobile-industrial-robots.com/security-advisories/path-traversal
• https://supportportal.mobile-industrial-robots.com/documentation/mir-cybersecurity-guide/mir-cybersecurity-guide/