CVE-2025-57791
Medium · 6.5CVSS
6.5
EPSS
37.0%
Published
Aug 20, 2025
CISA due date
—
The record
A security vulnerability has been identified that allows remote attackers to inject or manipulate command-line arguments passed to internal components due to insufficient input validation. Successful exploitation results in a valid user session for a low privilege role.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|