CVE-2025-62604: Metersphere

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

MeterSphere is an open source continuous testing platform. Prior to version 2.10.25-lts, a logic flaw allows retrieval of arbitrary user information. This allows an unauthenticated attacker to log in to the system as any user. This issue has been patched in version 2.10.25-lts.

Affected products

• Metersphere Metersphere: before 2.10.25 (fixed in 2.10.25)

Published 2025-10-22. Last modified 2026-06-17.