← Database

CVE-2025-2091

MEDIUM CVSS: 5.4 Published: 2025-06-16 Modified: 2026-06-17

Description

An open redirection vulnerability in M-Files mobile applications for Android and iOS prior to version 25.6.0 allows attackers to use maliciously crafted PDF files to trick other users into making requests to untrusted URLs.

Affected Platforms

M-Files M-Files Mobile

Weakness Type

CWE-601

References