CVE-2025-52164 identifies a vulnerability in Agorum core open versions 11.9.2 and 11.10.1 where credentials are stored in plaintext. This improper storage of sensitive information (CWE-256) can lead to unauthorized disclosure of credentials if an attacker gains access to the storage location. The vulnerability has a CVSS 3.1 base score of 8.2, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high confidentiality impact but limited integrity impact and no availability impact. There is no vendor advisory or patch information available at this time.

The vulnerability allows an unauthenticated attacker to access plaintext credentials, leading to a complete compromise of confidentiality. This could enable further unauthorized access or lateral movement within affected environments. Integrity impact is limited, and availability is not affected.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to credential storage locations and monitor for unauthorized access attempts. Avoid deploying affected versions in sensitive environments if possible.