Skip to content
OpenAdvisories

Product · Real Time Logic

Mako Server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2025-34095 Public exploit

    Mako Server v2.5 and v2.6 OS Command Injection via examples/save.lsp

    An OS command injection vulnerability exists in Mako Server versions 2.5 and 2.6, specifically within the tutorial interface provided by the examples/save.lsp endpoint. An unauthenticated attacker can send a crafted PUT request containing arbitrary Lua os.exe…

    Real Time Logic Mako Server