Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-13819 EUVD-2025-199977GHSA-5pv9-gvf5-hfgv

Open redirect in web server of MiR robots and MiR fleet

Published Dec 1, 2025 · Updated Dec 1, 2025 · Assigned by TRO

Description

Open redirect in the web server component of MiR Robot and Fleet software allows a remote attacker to redirect users to arbitrary external websites via a crafted parameter, facilitating phishing or social engineering attacks.

Affected products

VendorProductAffectedFixed
MiR Robot < 3.7.0 3.7.0
MiR Fleet < 3.7.0 3.7.0

References