Skip to content
OpenAdvisories

Product · IceWhale Tech

CasaOS

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2025-34171 Public exploit

    CasaOS <= 0.4.15 Unauthenticated File and Debug Data Exposure

    CasaOS versions up to and including 0.4.15 expose multiple unauthenticated endpoints that allow remote attackers to retrieve sensitive configuration files and system debug information. The /v1/users/image endpoint can be abused with a user-controlled path par…

    IceWhale Tech CasaOS