References https://nvd.nist.gov/vuln/detail/CVE-2025-41658 https://www.cve.org/CVERecord?id=CVE-2025-41658 https://cert.kenet.or.ke/cve-2025-41658-codesys-runtime-toolkit-file-permission-vulnerability-information-disclosure https://api-www.codesys.com/fileadmin/user_upload/CODESYS_Group/Ecosystem/Up-to-Date/Security/Security-Advisories/Advisory2025-06_CDS-93243.pdf https://www.nozominetworks.com/blog/backdooring-codesys-applications-via-vulnerability-chaining https://certvde.com/en/advisories/VDE-2025-049/ https://industrialcyber.co/industrial-cyber-attacks/chained-vulnerabilities-in-codesys-runtime-could-allow-root-level-control-of-industrial-devices-nozomi-warns/ https://zhuanlan.zhihu.com/p/2031886639736304048
Related VulnerabilitiesNuclio /api/functions runtimeAttributes.repositories 命令执行漏洞(CVE-2026-52833)PoCCVE-2026-34413: Xerte Online Toolkits <= 3.15 - Remote Code ExecutionUnity Runtime 访问控制不当漏洞PoCCVE-2023-34020: Uncanny Toolkit for LearnDash - Open RedirectionPoCgcloud-func-auto-runtime-updates-disabled: Automatic Runtime Security Updates Disabled in Google Cloud FunctionsPoCperfsonar-toolkit: perfSONAR Toolkit - ExposureWordPress plugin ID-SK Toolkit 跨站脚本漏洞SAML-Toolkits ruby-saml 签名验证不当漏洞智联云采 SRM2.0 runtimeLog download 任意文件读取漏洞WordPress plugin affiliate-toolkit 日志信息泄露漏洞Schneider Electric C-Bus Toolkit CVE-2023-5399 目录遍历漏洞Schneider Electric C-Bus Toolkit CVE-2021-22784 认证绕过漏洞Windows Runtime Prauthproviders CVE-2022-21971远程代码执行漏洞