Zip Path Traversal Vulnerability in Mendix Studio Pro Affects Multiple Versions

CVE-2025-40592

What is CVE-2025-40592?

A zip path traversal vulnerability has been identified in Mendix Studio Pro across various versions. This issue arises during the module installation process, enabling attackers to craft malicious modules that can be uploaded via the Mendix Marketplace. If successfully delivered, these malicious modules can manipulate or overwrite files situated outside of a developer's designated project directory, posing significant risks to system integrity and confidentiality.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References