Is CVE-2025-41118 actively exploited?

No active exploitation of CVE-2025-41118 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2025-41118 be exploited remotely?

Yes. CVE-2025-41118 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2025-41118?

CVE-2025-41118 has a CVSS score of 9.1 (CRITICAL).

HOME VULNERABILITIESCVE-2025-41118

CRITICAL

CVE-2025-41118

Published: April 15, 2026· Updated: Apr 20, 2026

9.1

CVSS v3.1

EPSS:0.03%probability of exploitation in 30 daysPercentile:8.7th

Official Description

Pyroscope is an open-source continuous profiling database. The database supports various storage backends, including Tencent Cloud Object Storage (COS).

If the database is configured to use Tencent COS as the storage backend, an attacker could extract the secret_key configuration value from the Pyroscope API.

To exploit this vulnerability, an attacker needs direct access to the Pyroscope API. We highly recommend limiting the public internet exposure of all our databases, such that they are only accessible by trusted users or internal systems.

This vulnerability is fixed in versions:

1.15.x: 1.15.2 and above.

1.16.x: 1.16.1 and above.

1.17.x: 1.17.0 and above (i.e. all versions).

Thanks to Théo Cusnir for reporting this vulnerability to us via our bug bounty program.

NVD Source

Technical Analysis

CVE-2025-41118 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), with a CVSS base score of 9.1.