---
id: "CVE-2025-2749"
kind: "vulnerability"
aliases: ["CVE-2025-2749"]
title: "An authenticated remote code execution in Kentico Xperience allows authenticated users Staging Sync Server to upload\u2026"
severity: "high"
cvss: 7.2
epss: null
exploited: true
status: "open"
category: "vendor"
products: [{"name": "Kentico Kentico Xperience", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "kentico xperience", "fixed": [], "affected": "<= 13.0.178", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "kentico-xperience", "staging-sync", "vendor"]
not_affected_if: ["unknown"]
published_at: "2025-03-24T19:15:52+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-23T23:44:51+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-2749", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2749", "first_seen_at": "2026-10-23T23:44:51+00:00"}]
---

# An authenticated remote code execution in Kentico Xperience allows authenticated users Staging Sync Server to upload…

Kentico Xperience has a path traversal flaw in its Staging Sync Server that lets an authenticated user write files to arbitrary locations relative to the server's paths. CISA lists it as actively exploited in the wild.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Kentico Kentico Xperience affected ? fixed ?
- vendor:kentico xperience affected <= 13.0.178 fixed ?

## How to check

Confirm whether the Staging Sync Server feature is in use on your Kentico Xperience instance; the sources do not give a file or setting to inspect.

## Fix

Apply the mitigations per Kentico's vendor instructions, as CISA directs; the sources do not name a fixed version.
If mitigations are unavailable, CISA says to discontinue use of the product.

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-2749
- 2026-10-23T23:44:51+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2025-2749

## From the sources

Kentico Xperience contains a path traversal vulnerability that could allow an authenticated user's Staging Sync Server to upload arbitrary data to path relative locations.

CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_