Vulnerability · Published Aug 8, 2025 · Assigned by TRO
CVE-2025-8749Path traversal vulnerability in MiR robot software via API requests
Medium 6.5
In plain English
A medium-severity path traversal in MiR Robots from Mobile Industrial Robots. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 37% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.4%top 63.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Path Traversal vulnerability in API Endpoint in Mobile Industrial Robots (MiR) Software Versions prior to 3.0.0 on MiR Robots allows authenticated users to extract files from the robot file system via a crafted API request.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Mobile Industrial Robots | MiR Robots | 0 – before 3.0.0 |
Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N