ZDI-CAN-27465
HIGH 7.8
Upcoming
Dec 23, 2025
Oumi
A high-severity vulnerability (CVSS 7.8) has been discovered in Oumi's product that allows local attackers to achieve significant compromise without authentication or user interaction. The attack requires local access to the system but can result in confidentiality, integrity, and availability breaches once exploited. Security teams should monitor for patch availability by the April 2026 deadline and prioritize systems where untrusted local users have access to Oumi software.
Advisory Details
Researcher
Discovered by:
Xingyu Wang
Reported
December 23, 2025
Deadline
April 22, 2026
5d
CVSS Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H