CVE-2025-69168

HighCVSS 8.1

Published: 17/06/2026(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.47%

37th percentile — higher than 37% of all known CVEs

There is an unauthenticated local file inclusion vulnerability in Spike versions <= 1.2.

An attacker could exploit this vulnerability to gain access to sensitive data on the server, potentially leading to serious security breaches.

It is recommended to upgrade to the latest version of Spike to mitigate this vulnerability.

Original NVD description (English source)

Unauthenticated Local File Inclusion in Spike <= 1.2 versions.