cvedb.io
CVE-2025-67079
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2026-01-15T16:16:11.977 · Last modified 2026-06-17T09:57:25.393

Summary

File upload vulnerability in Omnispace Agora Project before 25.10 allowing attackers to execute code through the MSL engine of the Imagick library via crafted PDF file to the file upload and thumbnail functions.

Affected products

agora-project — agora-project

Does this affect you?

Add your gear to cvedb and we'll alert you only when agora-project ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.