Medium SSA-627195 1 CVE

SSA-627195: Zip Path Traversal Vulnerability in Mendix Studio Pro's Module Installation Process

Published Jun 12, 2025 · Updated Sep 28, 2026 · Revision 3

Vendor: Siemens Product: Mendix Studio Pro 10 Product: Mendix Studio Pro 11 Product: Mendix Studio Pro 11.12 Product: Mendix Studio Pro 11.6 Product: Mendix Studio Pro 9

Summary

Mendix Studio Pro contains a vulnerability in the module installation process, that could allow an attacker to write or modify arbitrary files in directories outside a developer’s project directory.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

Medium 6.1

CVE-2025-40592

A vulnerability has been identified in Mendix Studio Pro 10 (All versions < V10.24.24 for Windows), Mendix Studio Pro 1…

Siemens Mendix Studio Pro 11 Mendix Studio Pro 11.12 Mendix Studio Pro 11.6 ICS / OT

Jun 12, 2025

Revision history

2026-09-28 #3
Removed unsupported versions; Adjusted fix versions
2025-07-08 #2
Added fix for Mendix Studio Pro 11
2025-06-12 #1
Publication Date

References

SSA-627195: Zip Path Traversal Vulnerability in Mendix Studio Pro's Module Installation Process - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-627195.html