CVE-2025-27136 – LocalS3 CreateBucketConfiguration Endpoint XXE Injection

Discover how CVE-2025-27136, a critical XXE vulnerability in LocalS3’s CreateBucketConfiguration endpoint, can be exploited to access sensitive files. Learn how the flaw works and how to mitigate it.

The post CVE-2025-27136 – LocalS3 CreateBucketConfiguration Endpoint XXE Injection appeared first on OffSec.

This article has been indexed from OffSec

Read the original article: