Loading vulnerability…
CVE-2025-24055 is an information disclosure vulnerability in the Windows USB Video Class System Driver caused by an out-of-bounds read. The flaw allows the driver to read memory beyond the intended buffer boundary when processing crafted input from a physical device, which can result in disclosure of unintended memory contents. Microsoft classifies the issue as affecting the Windows USB Video Driver and notes that exploitation requires an authorized attacker and physical access.
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
If you can’t patch tonight, do this now.
Patch, then assume compromise.
1 valid exploit after Mallory filtered fakes, detection scripts, and README-only repos.
This repository is a proof-of-concept/demo environment for CVE-2026-24055, an improper access control issue in Langfuse affecting versions 3.89.0 through 3.146.0. It does not contain custom exploit code; instead, it provides documentation plus two Docker Compose environments to reproduce the vulnerable behavior and verify the fix. The vulnerable setup runs Langfuse 3.146.0, while the patched setup runs 3.147.0. Repository structure is minimal: README.md explains the vulnerability, attack flow, setup, exploitation steps, and expected patched behavior; vulnerable/docker-compose.yml and vulnerable/.env.example define a local Langfuse stack with Slack OAuth enabled for reproducing the issue; patched/docker-compose.yml and patched/.env.example define the same stack on the fixed version for regression verification. Supporting services include PostgreSQL, Redis, ClickHouse, and MinIO. Main exploit capability: an unauthenticated attacker can browse to the public endpoint /api/public/slack/install with a victim projectId and trigger Slack OAuth without being logged into Langfuse. By authorizing their own Slack workspace, the attacker binds that workspace to the victim project. Subsequent victim-created Slack automations can then send prompt-related notifications and metadata to the attacker-controlled Slack workspace. This is a web/network attack against the Langfuse HTTP interface, centered on localhost:3000 in the demo. The repository is best classified as a POC rather than an operational exploit: there is no standalone exploit script, no automated payload delivery, and no post-exploitation tooling. It is nevertheless a valid exploit demonstration because it provides reproducible steps and infrastructure to exploit the vulnerable endpoint and confirm the security impact, as well as to verify that the patched version returns 401/403 responses instead.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
Vendor-confirmed product mapping. Mallory continuously reconciles this list against your asset inventory.
5 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
A Windows USB Video Class System Driver information disclosure vulnerability listed in the summary table.
Information disclosure vulnerability in Windows USB Video Class system driver.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.