CVE-2025-5409

Name of the Vulnerable Software and Affected Versions Mist Community Edition versions up to 4.7.1

Description A critical issue has been found, affecting the create token function of the API Token Handler component. This leads to improper access controls, allowing remote attacks. The issue has been publicly disclosed and may be exploited.

Recommendations For Mist Community Edition versions up to 4.7.1, upgrade to version 4.7.2 to address this issue. As a temporary workaround, consider restricting access to the create token function of the API Token Handler component until the upgrade is applied.