Eve-ng vulnerabilities
We track 3 vulnerabilities in Eve-ng products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on December 19, 2025.
Latest Eve-ng vulnerabilities
- 7.6 High severity
Eve-ng: Improper Limitation of a Pathname to a Restricted Directory
EVE-NG 6.4.0-13-PRO is vulnerable to Directory Traversal. The /api/export interface allows authenticated users to export lab files. This interface lacks effective input validation and filtering when processing file path parameters submitted by users.
- 7.2 High severity
Eve-ng: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the apiImportLabs function in api_labs.php of EVE-NG 2.0.3-112 Community allows attackers to execute arbitrary code via a crafted UNL file.
- 8.8 High severity
Eve-ng: Improper Neutralization of Special Elements used in an OS Command
An OS Command Injection vulnerability in the configuration parser of Eve-NG Professional through 4.0.1-65 and Eve-NG Community through 2.0.3-112 allows a remote authenticated attacker to execute commands as root by editing virtualization command parameters of