CVE-2025-12490 is a path traversal vulnerability in the Suricata package of Netgate pfSense CE that allows authenticated remote attackers to create arbitrary files with root privileges. This occurs due to insufficient validation of user-supplied file paths before file operations. Exploitation requires authentication but can lead to remote code execution with high impact.