Skip to content
Sign in
5.3 Medium

CVE-2025-9094 A vulnerability was detected in ThingsBoard 4.1

Description

A vulnerability was detected in ThingsBoard 4.1. This vulnerability affects unknown code of the component Add Gateway Handler. The manipulation leads to improper neutralization of special elements used in a template engine. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor replies, that "[t]he fix will come within upcoming release (v4.2) and will be inherited by maintenance releases of LTS versions (starting 4.0)."

Affected products and versions

Product Affected versions Fixed in
ThingsBoard 4.1 No fix stated

Other CVEs of ThingsBoard

The 4 CVEs of ThingsBoard →
CVE-2026-9568 A weakness has been identified in ThingsBoard up to 4.3.1.1 2.3 Low CVE-2024-9358 A vulnerability has been found in ThingsBoard up to 3.7.0 and classified as problematic 6.0 Medium CVE-2024-3270 A vulnerability classified as problematic was found in ThingsBoard up to 3.6.2 3.8 Low
Track this CVE