CVE-2025-12059: Improper Access Control in Logo Software's Logo j-Platform

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-02-11 · updated 2026-06-17
Weakness: CWE-538

Description

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Logo Software Industry and Trade Inc. Logo j-Platform allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Logo j-Platform: from 3.29.6.4 before 3.34.8.9.

Affected products

Logo Software Industry and Trade Inc. Logo j-Platform: from 3.29.6.4 before 3.34.8.9 — fixed in 3.34.8.9

How to fix

Upgrade to a fixed version: Logo Software Industry and Trade Inc. Logo j-Platform 3.34.8.9. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2025-12059 or the next vulnerability affects your stack