CVE-2025-25371

Summary

CVE-2025-25371 is a newly disclosed vulnerability affecting NASA's cFS (Core Flight System) Aquila. The OSAL (Open Source Application Layer) module in the system has been identified as the point of entry for this issue. Hackers can exploit this path traversal weakness to manipulate file paths and gain unauthorized access to arbitrary files on the system. This poses a significant risk to the confidentiality and integrity of data processed by the NASAS cFS Aquila. Users are advised to apply the necessary patches or updates as soon as possible to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.