---
id: 10197
title: "Cisco IOS XE WLC Arbitrary File Upload Vulnerability (CVE-2025-20188) Analysis"
cve: CVE-2025-20188
source_domain: horizon3.ai
source_url: "https://horizon3.ai/attack-research/attack-blogs/cisco-ios-xe-wlc-arbitrary-file-upload-vulnerability-cve-2025-20188-analysis/"
published_at: "2025-05-29T14:50:04Z"
tags: ["rce", "vulnerability-research", "cisco"]
phying_url: "https://phying.com/item/10197"
lang: en
---

# Cisco IOS XE WLC Arbitrary File Upload Vulnerability (CVE-2025-20188) Analysis

## Summary

Explore how a hard-coded JWT in Cisco IOS XE WLC enables unauthenticated file upload and potential RCE—and how to mitigate it.

## Intelligence Metadata

- **Sources:** horizon3.ai
- **CVE:** CVE-2025-20188
- **Published:** 2025-05-29T14:50:04Z
- **Original:** https://horizon3.ai/attack-research/attack-blogs/cisco-ios-xe-wlc-arbitrary-file-upload-vulnerability-cve-2025-20188-analysis/
- **Phying News:** https://phying.com/item/10197