CVE-2025-64299 is a vulnerability in LogStare Collector where the software improperly handles password hash data. This flaw allows an administrative user to access password hashes of other users. The vulnerability has a CVSS score of 4.9, indicating medium severity, with confidentiality impact but no integrity or availability impact.