CVE-2025-51055 identifies an insecure data storage vulnerability in Vedo Suite version 2024.17. The configuration file /api_vedo/configuration/config.yml stores credentials, secret keys, and database details in clear text, allowing remote attackers to access sensitive information without authentication. The vulnerability has a CVSS 3.1 base score of 8.6 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N), indicating network attack vector, low attack complexity, no privileges or user interaction required, and high confidentiality impact with no integrity or availability impact.

An attacker with network access can retrieve sensitive credentials and secret keys stored in clear text, potentially leading to unauthorized access to databases and other protected resources. The confidentiality of critical information is severely compromised, but integrity and availability are not directly affected.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected configuration file and consider encrypting sensitive data stored in configuration files. Monitor vendor communications for patches or official mitigations.