CVE-2025-29157: Smartbear Swagger Petstore

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via accessing a non-existent endpoint/cart, the server returns a 404-error page exposing sensitive information including the Servlet name (default) and server version

Affected products

• Smartbear Swagger Petstore: version 1.0.7 only

Published 2025-09-25. Last modified 2026-06-17.