VYPR
← All advisories
High severity7.0NVD Advisory· Published Jul 22, 2025· Updated Jun 17, 2026

CVE-2025-51463

CVE-2025-51463

Description

Path Traversal in restore_run_backup() in AIM 3.28.0 allows remote attackers to write arbitrary files to the server's filesystem via a crafted backup tar file submitted to the run_instruction API, which is extracted without path validation during restoration.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Aimstack/Aim
    cpe:2.3:a:aimstack:aim:3.28.0:*:*:*:*:python:*:*
  • AIM/AIMdescription
  • Aimhubio/Aimllm-fuzzy
    Range: <3.28.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.