Skip to content
OpenAdvisories

Vendor

Sawtooth Software

1 known vulnerabilities.

Products

Lighthouse Studio 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2025-34300 Public exploit EPSS 81%

    Sawtooth Software Lighthouse Studio < 9.16.14 Pre-Authentication RCE

    A template injection vulnerability exists in Sawtooth Software’s Lighthouse Studio versions prior to 9.16.14 via the  ciwweb.pl http://ciwweb.pl/  Perl web application. Exploitation allows an unauthenticated attacker can execute arbitrary commands.

    Sawtooth Software Lighthouse Studio