Vulnerability · Published Dec 4, 2025 · Assigned by VulnCheck
CVE-2025-66573Solstice Pod API Session Key Extraction via API Endpoint
Medium 6.9
In plain English
A medium-severity security flaw in Solstice Pod API from mersive. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).
Severity (CVSS 4.0)6.9Medium
Exploit odds (30 days)0.3%top 74.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Solstice Pod API (version 5.5, 6.2) contains an unauthenticated API endpoint (`/api/config`) that exposes sensitive information such as the session key, server version, product details, and display name. Unauthorized users can extract live session information by accessing this endpoint without authentication.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| mersive | Solstice Pod API | 5.56.2 |
Weakness: CWE-319 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
References
- ExploitDB-52104 exploit
- Mersive Homepage product
- Solstice Documentation product
- https://www.vulncheck.com/advisories/solstice-pod-api-session-key-extraction-via-api-endpoint third-party-advisory