VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Dec 3, 2025· Updated Sep 25, 2026

CVE-2025-65096

CVE-2025-65096

Description

RomM (ROM Manager) allows users to scan, enrich, browse and play their game collections with a clean and responsive interface. Prior to 4.4.1 and 4.4.1-beta.2, users can read private collections / smart collections belonging to other users by directly accessing their IDs via API. No ownership verification or checking if the collection is public/private before returning collection data. This vulnerability is fixed in 4.4.1 and 4.4.1-beta.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Romm.app/Rommllm-fuzzy4 versions
    <4.4.1, <4.4.1-beta.2+ 3 more
    • (no CPE)range: <4.4.1, <4.4.1-beta.2
    • (no CPE)range: < 4.4.1-beta.2
    • cpe:2.3:a:romm.app:romm:*:*:*:*:*:*:*:*range: <4.4.1
    • cpe:2.3:a:romm.app:romm:4.4.1:beta1:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.