Skip to content
OpenAdvisories

Vendor

Real Time Logic

1 known vulnerabilities.

Products

Mako Server 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2025-34095 Public exploit

    Mako Server v2.5 and v2.6 OS Command Injection via examples/save.lsp

    An OS command injection vulnerability exists in Mako Server versions 2.5 and 2.6, specifically within the tutorial interface provided by the examples/save.lsp endpoint. An unauthenticated attacker can send a crafted PUT request containing arbitrary Lua os.exe…

    Real Time Logic Mako Server