CVE-2025-69167

37th percentile — higher than 37% of all known CVEs

Versions of Eros up to 1.3 are vulnerable to unauthenticated local file inclusion. An attacker can exploit this vulnerability to gain access to system files.

Organizations may be exposed to the disclosure of sensitive data and the potential execution of unauthorized code on the server.

It is recommended to upgrade to the latest version of Eros to mitigate this vulnerability and implement appropriate security measures.