Medium severity6.1NVD Advisory· Published Oct 30, 2025· Updated Apr 15, 2026

CVE-2025-60950

Description

An arbitrary file upload vulnerability in the Data Preparation function of AIxBlock commit f60975 allows attackers to execute arbitrary code via a crafted SVG file.

Affected products

AIxBlock 2023/Awesome AI Dev Platform Opensourcereferences
AIxBlock 2023/AIxBlockllm-create

Patches

Vulnerability mechanics

References

app.aixblock.io/temp/dbdf9e79_payload1.svgnvd
github.com/AIxBlock-2023/awesome-ai-dev-platform-opensource/issues/101nvd
github.com/AIxBlock-2023/awesome-ai-dev-platform-opensource/pull/172/commits/f60975d58215db83d5d111bd50a86e269c228081nvd

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000