CVE-2025-8729 | MigoXLab LMeterX 1.2.0 upload_service.py process_cert_files task_id path traversal (Issue 10)

A vulnerability has been found in MigoXLab LMeterX 1.2.0 and classified as critical. Affected by this vulnerability is the function process_cert_files of the file backend/service/upload_service.py. The manipulation of the argument task_id leads to path traversal.

This vulnerability is known as CVE-2025-8729. The attack can be launched remotely. Furthermore, there is an exploit available.

It is recommended to apply a patch to fix this issue.