Path Traversal and Local File Inclusion Vulnerability in Mockoon API Design Tool

CVE-2025-59049

What is CVE-2025-59049?

Mockoon, a tool designed for creating and managing mock APIs, has a vulnerability that allows an attacker to exploit the user input in server filename generation. This issue can result in unauthorized access to files on the server, particularly in cloud-hosted environments. The vulnerability arises in versions prior to 9.2.0, where the configuration for static file serving did not properly sanitize input, thus enabling path traversal and local file inclusion attacks. Users are strongly recommended to upgrade to version 9.2.0 or later to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References