LOWCVSS 3.8

CVE-2025-14881

CVE-2025-14881 updated by NVD

Modified: 2026-10-16
Sources: nvd

Summary

Multiple API endpoints allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be accessible by UUID only.

References

https://nvd.nist.gov/vuln/detail/CVE-2025-14881

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.