CVE-2025-1281

Summary

The flaw allows authenticated attackers with Subscriber-level access or higher to delete arbitrary files, potentially leading to remote code execution.

Exploitability

Exploitation is relatively straightforward for attackers with Subscriber-level access or higher, as no specific technical skills are required beyond file path manipulation.

Blast radius

If exploited, the impact could be severe, as it may lead to full server compromise and remote code execution.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 3.17.1 or later of the BM Content Builder plugin.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.