CVE-2025-24815 is an unrestricted file upload vulnerability in Nokia MantaRay NM caused by insufficient validation of uploaded file types. This weakness allows an authenticated attacker to upload potentially malicious files, which could compromise system confidentiality, integrity, and availability. The vulnerability affects versions before 25R2-NM. No official fix or remediation level has been published by Nokia as of now, and no known exploits have been reported in the wild.

Successful exploitation could lead to the attacker uploading malicious files, potentially resulting in full compromise of the affected system's confidentiality, integrity, and availability. The CVSS 3.1 base score of 7.8 reflects a high severity impact with low attack complexity, requiring low privileges and no user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict authenticated user permissions to limit file upload capabilities and monitor for suspicious file uploads related to this vulnerability.