CVE-2025-62723

MEDIUM 4.3CVE-2025-62723 · Published 24/10/2025 · updated 08/10/2026

In short

CVE-2025-62723 is a MEDIUM (CVSS 4.3) vulnerability affecting flashmq (flashmq).
Chance of exploitation in the next 30 days (EPSS): 0.34%, higher than 27.7% of all vulnerabilities.
Fix: update to 1.23.2 or later.

Package	Affected versions	Patched versions
flashmq flashmq	`< 1.23.2`	`1.23.2`

Description

FlashMQ is a MQTT broker/server, designed for multi-CPU environments. Prior to version 1.23.2, any authenticated user can create sessions and have them collect QoS messages. When not sent to a client, these are then not released upon (eventual) session expiration. Version 1.23.2 fixes the issue.

References

halfgaar/FlashMQ commit e86c493 · Patch
halfgaar/FlashMQ · Issue Tracking
halfgaar/FlashMQ security advisory · Patch

More vulnerabilities in flashmq

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free