CVE-2025-48208 is an LDAP Injection vulnerability in Apache HertzBeat versions through 1.7.2. It requires an attacker to have an authenticated account with access and involves crafting custom commands to exploit. Successful exploitation can lead to arbitrary script execution. The issue is fixed in version 1.7.3.