CVE advisoryCRITICAL
CVE-2025-54790
HumHub Files SQL Injection Vulnerability Allows Unauthorized Data Access
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in the Files module, used for managing files in HumHub, could allow unauthorized data access by exploiting backend SQL queries. This could potentially expose system and user data. Confirm if this module is in use and assess its exposure.