Is CVE-2025-55202 actively exploited?

No active exploitation of CVE-2025-55202 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2025-55202 be exploited remotely?

Yes. CVE-2025-55202 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2025-55202?

CVE-2025-55202 has a CVSS score of 5.3 (MEDIUM).

HOME VULNERABILITIESCVE-2025-55202

MEDIUM

CVE-2025-55202

CWE-23Published: August 29, 2025· Updated: Jun 17, 2026

5.3

CVSS v3.1

Official Description

Opencast is a free, open-source platform to support the management of educational audio and video content. In version 18.0 and versions before 17.7, the protections against path traversal attacks in the UI config module are insufficient, still partially allowing for attacks in very specific cases. The path is checked without checking for the file separator. This could allow attackers access to files within another folder which starts with the same path. This issue has been fixed in versions 17.7 and 18.1. To mitigate this issue, check for folders that start with the same path as the ui-config folder.

NVD Source

Technical Analysis

CVE-2025-55202 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.