CVE-2025-54379 - CVE House
Back to Database
Status published High CVE-2025-54379

eKuiper API endpoints handling SQL queries with user-controlled table names.

Vulnerability Description

LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices. In versions before 2.2.1, there is a critical SQL Injection vulnerability in the getLast API functionality of the eKuiper project. This flaw allows unauthenticated remote attackers to execute arbitrary SQL statements on the underlying SQLite database by manipulating the table name input in an API request. Exploitation can lead to data theft, corruption, or deletion, and full database compromise. This is fixed in version 2.2.1.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-54379

Credits & Attribution

No credits recorded in the NVD database.

References

More from lf-edge

View All →
CVE-2024-52812
LF Edge eKuiper has Stored XSS in Rules Functionality
Medium 5.4
CVE-2024-52290
Stored XSS in Configuration Key Functionality
Medium 6.3
CVE-2024-43406
LF Edge eKuiper has a SQL Injection in sqlKvStore
High 8.8

Affected Vendor

Affected Software

ekuiper
Vulnerable Versions:
< 2.2.1

Timeline

Official Publish: July 24th, 2025
Last Modified: July 25th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-89

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1059 Command and Scripting Interpreter
Execution
T1213.006 Databases
Collection
T1485 Data Destruction
Impact