CVE-2025-29819
External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.2
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
- EPSS probability
- 1.05%
- CWE
- CWE-73
- Published
- 2025-04-08
- Last modified
- 2026-08-10
Affected products
- Microsoft Windows Admin Center
- Microsoft Windows Admin Center in Azure Portal
Weakness type
Related vulnerabilities
- CVE-2026-50148 — Metabase: Remote Code Execution via Snowflake JDBC Driver Arbitrary File Write
- CVE-2026-20358 — Cisco Crosswork Security Hardening Release: August 2026
- CVE-2026-11526 — GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments in _make_filehandle
- CVE-2026-67429 — Flyto2 Core: Arbitrary file write via image.download (and other file-writing modules)
- CVE-2025-71338 — Flowise - Arbitrary File Write to Remote Code Execution via document-store API
- CVE-2026-48750 — Incus has an arbitrary file write on host via `exec-output` symlink in crafted image
- CVE-2026-9559 — A path traversal vulnerability exists in the campaign import feature of Mautic 7. When extracting uploaded ZIP files dur
- CVE-2026-63343 — Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root