CVE-2025-15107

CVE-2025-15107 is a high-severity vulnerability affecting actiontech sqle up to version 4.2511.0, specifically within the JWT Secret Handler component. The flaw stems from the use of a hard-coded cryptographic key when handling the JWTSecretKey argument, allowing for remote exploitation. Despite a high attack complexity and difficult exploitability, successful exploitation could lead to high impacts on confidentiality, integrity, and availability. While the exploit has been publicly disclosed, there is no evidence of active exploitation, nor are there readily available exploit modules or significant community discussion surrounding this vulnerability.