CVE-2025-26014 PoC — Loggrove 安全漏洞

Source

https://github.com/vigilante-1337/CVE-2025-26014

Associated Vulnerability

Title:Loggrove 安全漏洞 (CVE-2025-26014)
Description:Loggrove是olajowon个人开发者的一个 Web 平台服务。 Loggrove v.1.0版本存在安全漏洞，该漏洞源于通过path参数可以执行任意代码。

Description

A Remote Code Execution (RCE) vulnerability in Loggrove v.1.0 allows a remote attacker to execute arbitrary code via the path parameter. The manipulation of the argument path from read.py file leads to os command injection. The attack can be launched remotely.

Readme

![screenshot](https://github.com/vigilante-1337/CVE-2025-26014/blob/main/static/CVE-2025-26014.png)

File Snapshot


 [4.0K]  /data/pocs/f69cc3caf31c312ce6cfa24a033edfb648bc8e57
├── [ 733]  docker-requirements
├── [7.2K]  exploit
├── [ 100]  README.md
└── [4.0K]  static
    └── [ 94K]  CVE-2025-26014.png

1 directory, 4 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!