Medium severity6.3NVD Advisory· Published Sep 8, 2025· Updated Apr 29, 2026
CVE-2025-10096
CVE-2025-10096
Description
A vulnerability was determined in SimStudioAI sim up to 1.0.0. This affects an unknown function of the file apps/sim/app/api/files/parse/route.ts. Executing manipulation of the argument filePath can lead to server-side request forgery. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. This patch is called 3424a338b763115f0269b209e777608e4cd31785. Applying a patch is advised to resolve this issue.
Affected products
1Patches
2fd6d927228a73424a338b763https://github.com/simstudioai/simvia nvd-ref
Vulnerability mechanics
Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.
References
6- github.com/simstudioai/sim/commit/3424a338b763115f0269b209e777608e4cd31785nvdPatch
- github.com/simstudioai/sim/issues/960nvdExploitIssue TrackingVendor Advisory
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- github.com/simstudioai/sim/pull/1149nvdIssue Tracking
- vuldb.comnvdPermissions RequiredVDB Entry
News mentions
0No linked articles in our index yet.