What’s Vulnerable › Products

LitmusChaos Litmus vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your LitmusChaos Litmus version is affected

Latest LitmusChaos Litmus vulnerabilities

• CVE-2025-14261 — Lack of entropy allows registered low-privileged users of Litmus to crack valid JWT tokens and gain admin privileges (CVSS 7.1)
• CVE-2025-8797 — LitmusChaos Litmus LocalStorage permission (CVSS 8.8)
• CVE-2025-8796 — LitmusChaos Litmus Delete Request delete_project authorization (CVSS 5.4)
• CVE-2025-8795 — LitmusChaos Litmus login access control (CVSS 9.9)
• CVE-2025-8794 — LitmusChaos Litmus LocalStorage authorization (CVSS 7.8)
• CVE-2025-8793 — LitmusChaos Litmus resource injection (CVSS 4.3)
• CVE-2025-8792 — LitmusChaos Litmus client-side enforcement of server-side security (CVSS 4.3)
• CVE-2025-8791 — LitmusChaos Litmus list_projects improper authorization (CVSS 6.3)