High severity7.5OSV Advisory· Published Jan 6, 2025· Updated Apr 15, 2026

CVE-2025-21618

Description

NiceGUI is an easy-to-use, Python-based UI framework. Prior to 2.9.1, authenticating with NiceGUI logged in the user for all browsers, including browsers in incognito mode. This vulnerability is fixed in 2.9.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
niceguiPyPI	< 2.9.1	2.9.1

Affected products

Zauberzeug/NiceguiOSV
Range: v0.1.2, v0.2.0, v0.2.1, …
ghsa-coords
pkg:pypi/nicegui
Range: < 2.9.1

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-v6jv-p6r8-j78wghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2025-21618ghsaADVISORY
github.com/zauberzeug/nicegui/commit/1621a4ba6a06676b8094362d36623551e651adc1nvdWEB
github.com/zauberzeug/nicegui/security/advisories/GHSA-v6jv-p6r8-j78wnvdWEB

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000