VULNERABILITY INTELLIGENCE
CVE-2025-34300
EPSS probability81.26%
CISA KEVNot currently listed
Published2025-07-16
Last modified2026-06-17
Description
A template injection vulnerability exists in Sawtooth Software’s Lighthouse Studio versions prior to 9.16.14 via the ciwweb.pl http://ciwweb.pl/ Perl web application. Exploitation allows an unauthenticated attacker can execute arbitrary commands.
Weakness classification
- disclosure@vulncheck.com: CWE-20