CVE-2025-27920

Name of the Vulnerable Software and Affected Versions Output Messenger versions prior to 2.0.63

Description Output Messenger is affected by a directory traversal issue caused by improper file path handling. Remote attackers can use ../ sequences in parameters to access sensitive files outside the intended directory, which may lead to arbitrary file access or the leakage of configuration data. This flaw has been exploited in cyber espionage campaigns by threat actors such as Marbled Dust (also known as Sea Turtle or Cosmic Wolf) targeting Kurdish military personnel in Iraq. In these incidents, the vulnerability was used as an initial access vector to drop malicious payloads and establish control over servers via Golang backdoors for data exfiltration.

Recommendations Update Output Messenger to version 2.0.63 or later.