CVE-2025-26525
Arbitrary file read risk through pdfTeX
Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available (such as those with TeX Live installed).
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Arbitrary file read risk through pdfTeX
Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available (such as those with TeX Live installed).
- Record
CVE-2025-26525- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N - Weakness
- CWE-552
- Updated
- 2026-11-02
EUVDEUVD-2025-4275
Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available (such as those with TeX Live installed).
- Record
EUVD-2025-4275- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-4hmr-39vp-xfrr
Moodle has an arbitrary file read risk through pdfTeX
Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available (such as those with TeX Live installed).
- Record
GHSA-4hmr-39vp-xfrr- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N - Weakness
- CWE-552
- Updated
- 2026-11-02
NVD
Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available (such as those with TeX Live installed).
- Record
CVE-2025-26525- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N - Weakness
- CWE-552
- Updated
- 2026-11-02
OSV
Arbitrary file read risk through pdfTeX
Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available (such as those with TeX Live installed).
- Record
CVE-2025-26525- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N - Weakness
- CWE-552
- Updated
- 2026-11-02
OSVGHSA-4hmr-39vp-xfrr
Moodle has an arbitrary file read risk through pdfTeX
Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available (such as those with TeX Live installed).
- Record
GHSA-4hmr-39vp-xfrr- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N - Weakness
- CWE-552
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-26525
Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available (such as those with TeX Live installed).
- Record
UBUNTU-CVE-2025-26525- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N - Updated
- 2026-11-02
OSVBIT-moodle-2025-26525 No score
Arbitrary file read risk through pdfTeX
Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available (such as those with TeX Live installed).
- Record
BIT-moodle-2025-26525- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
moodle/moodlePackagist |
4.5.0-beta up to 4.5.2 | 4.5.2 |
moodle/moodlePackagist |
4.4.0-beta up to 4.4.6 | 4.4.6 |
moodle/moodlePackagist |
4.3.0-beta up to 4.3.10 | 4.3.10 |
moodle/moodlePackagist |
before 4.1.16 | 4.1.16 |
moodleBitnami |
4.1.0 up to 4.1.16, 4.3.0 up to 4.3.10, 4.4.0 up to 4.4.6, 4.5.0 up to 4.5.2 | 4.1.164.3.104.4.64.5.2 |
moodle/moodlePackagist |
4.5.0-beta up to 4.5.2, plus listed versions v4.5.0v4.5.0-betav4.5.0-rc1v4.5.0-rc2v4.5.1 |
4.5.2 |
moodle/moodlePackagist |
4.4.0-beta up to 4.4.6, plus listed versions v4.4.0v4.4.0-betav4.4.0-rc1v4.4.0-rc2v4.4.1 Show 4 moreShow lessv4.4.2v4.4.3v4.4.4v4.4.5 |
4.4.6 |
moodle/moodlePackagist |
4.3.0-beta up to 4.3.10, plus listed versions v4.3.0v4.3.0-betav4.3.0-rc1v4.3.0-rc2v4.3.1 Show 8 moreShow lessv4.3.2v4.3.3v4.3.4v4.3.5v4.3.6v4.3.7v4.3.8v4.3.9 |
4.3.10 |
moodle/moodlePackagist |
before 4.1.16, plus listed versions v2.3.10v2.3.11v2.3.4v2.3.5v2.3.6 Show 45 moreShow lessv2.3.7v2.3.8v2.3.9v2.4.0v2.4.0-rc1v2.4.1v2.4.10v2.4.11v2.4.2v2.4.3v2.4.4v2.4.5v2.4.6v2.4.7v2.4.8v2.4.9v2.5.0v2.5.0-betav2.5.0-rc1v2.5.1v2.5.2v2.5.3v2.5.4v2.5.5v2.5.6v2.5.7v2.5.8v2.5.9v2.6.0v2.6.0-betav2.6.0-rc1v2.6.1v2.6.10v2.6.11v2.6.2v2.6.3v2.6.4v2.6.5v2.6.6v2.6.7v2.6.8v2.6.9v2.7.0v2.7.0-betav2.7.0-rc1 |
4.1.16 |
moodleUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 2.7.9+dfsg-12.7.10+dfsg-12.7.11+dfsg-12.7.11+dfsg-22.7.12+dfsg-13.0.3+dfsg-0ubuntu13.0.3+dfsg-0ubuntu1+esm1 |
None known |
moodleUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 3.0.3+dfsg-0ubuntu13.0.3+dfsg-0ubuntu1+esm1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-26525 is a high vulnerability (CVSS 8.6) in Moodle, published February 24, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.45%, the 39th percentile. Fixed in moodle/moodle 4.5.2.
References
moodle.org/mod/forum/discuss.php?d=466141
git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84136
nvd.nist.gov/vuln/detail/CVE-2025-26525
github.com/advisories/GHSA-4hmr-39vp-xfrr
ubuntu.com/security/CVE-2025-26525
cve.org/CVERecord?id=CVE-2025-26525
Left out here: 298 versions. The JSON record has them.