Read the docs
TI-2025-05867 Aliases CVE-2025-6466GHSA-c5rx-x9g6-843g

ageerle ruoyi-ai SseServiceImpl.java upload unrestricted upload

Priority MEDIUM 57CWE-284Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass, Code execution
Confidentiality · integrity · availability
Low · Low · Low
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-284 and CWE-434.

Summary

A vulnerability was found in ageerle ruoyi-ai 2.0.0 and classified as critical. Affected by this issue is the function speechToTextTranscriptionsV2/upload of the file ruoyi-modules/ruoyi-system/src/main/java/org/ruoyi/system/service/impl/SseServiceImpl.java. The manipulation of the argument File leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.0.1 is able to address this issue. The patch is identified as 4e93ac86d4891c59ecfcd27c051de9b3c5379315. It is recommended to upgrade the affected component.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00386 32nd percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by the CNA and NVD
Fix Fixed ruoyi-ai (ageerle): 2.0.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ageerleruoyi-ai2.0.02.0.1Patch availableCNA
  • ruoyi-ai Vendorageerle Affected 2.0.0 Fixed in 2.0.1 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:ageerle:ruoyi-ai:*:*:*:*:*:*:*:*before 2.0.1Vulnerableageerle
  • cpe:2.3:a:ageerle:ruoyi-ai:*:*:*:*:*:*:*:* Versions before 2.0.1 Vulnerable ·ageerle

Remediation

  • Fix · CNA ruoyi-ai (ageerle) Fixed in 2.0.1

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-6466
  2. 2026-10-03 Alias added: GHSA-c5rx-x9g6-843g

References

Exploit 2

Patch 2

  • TI-2025-02801 ageerle ruoyi-ai SysNoticeController.java improper authorization CVSS 4.0MEDIUM 6.9

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences