CVE-2025-46094: Liquidfiles

Low severity, CVSS 3.8. EPSS: 0.5% chance of exploitation in the next 30 days.

LiquidFiles before 4.1.2 allows directory traversal by configuring the pathname of a local executable file as an Actionscript.

Affected products

• Liquidfiles Liquidfiles: before 4.1.2 (fixed in 4.1.2)

Published 2025-08-04. Last modified 2026-06-17.