CVE-2025-69173

HighCVSS 8.1

Published: 17/06/2026(UTC)Updated: 06/10/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.44%

36th percentile - higher than 36% of all known CVEs

Summary

Versions of Tipsy up to 1.1 are vulnerable to unauthenticated local file inclusion. An attacker can exploit this vulnerability to gain access to system files.

Risk Assessment

Organizations may be exposed to the disclosure of sensitive information and potential system takeover.

Recommendation

It is recommended to update Tipsy to the latest version to mitigate this vulnerability.

Other vulnerabilities in Tipsy

CVE-2026-62052Critical
PHP Object Injection vulnerability in Tipsy versions up to and including 1.6. An unauthenticated attacker can inject a malicious PHP object. This may lead to further exploitation of the system.

Original NVD description (English source)

Unauthenticated Local File Inclusion in Tipsy <= 1.1 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS