CVE-2025-2449

CVE-2025-2449 is a remote code execution vulnerability affecting NI FlexLogger, stemming from a directory traversal flaw in the usiReg component's URI file parsing. This allows remote attackers to create arbitrary files and execute code in the context of the current user, requiring user interaction such as visiting a malicious page. With a CVSS score of 8.8 (HIGH), the vulnerability has a network attack vector and low attack complexity, leading to high impacts on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.