Read the docs

Sawtooth Software

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Sawtooth Software records in CISA KEV

No Sawtooth Software vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-24433 CVE-2025-34300 · GHSA-m8mc-qpg2-g56x

Sawtooth Software Lighthouse Studio < 9.16.14 Pre-Authentication RCE

Priority CRITICAL 89

A template injection vulnerability exists in Sawtooth Software’s Lighthouse Studio versions prior to 9.16.14 via the ciwweb.pl http://ciwweb.pl/ Perl web application.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.81264 Published 2025-07-16 Fixed in 9.16.14 CWE-1336
Open these records in search →