CVE-2025-58954

HighCVSS 8.1

Published: 17/06/2026(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Summary

There is an unauthenticated local file inclusion vulnerability in HomeRoofer versions <= 2.11.0.

An attacker could exploit this vulnerability to gain access to sensitive files on the server, potentially leading to data exposure.

It is recommended to upgrade to the latest version of HomeRoofer to mitigate this vulnerability.

Original NVD description (English source)

Unauthenticated Local File Inclusion in HomeRoofer <= 2.11.0 versions.