TI-2025-35166 Aliases CVE-2025-55746 GHSA-mv33-9f6j-pfmc

Directus allows unauthenticated file upload and file modification due to lacking input sanitization

MEDIUM 49CWE-434Published 2025-08-20 · Updated 2025-08-20

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: None · High · Low
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-434.

Summary

Directus is a real-time API and App dashboard for managing SQL database content. From 10.8.0 to before 11.9.3, a vulnerability exists in the file update mechanism which allows an unauthenticated actor to modify existing files with arbitrary contents (without changes being applied to the files' database-resident metadata) and / or upload new files, with arbitrary content and extensions, which won't show up in the Directus UI. This vulnerability is fixed in 11.9.3.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.014 72nd percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed directus (directus): 11.9.3directus (npm): 11.9.3+1 more product

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
directus	directus	10.8.0 to before 11.9.3	11.9.3	Patch available	CNA
—	directus (npm)	10.8.0 to before 11.9.3	11.9.3	Patch available	GHSA-mv33-9f6j-pfmc
—	@directus/api (npm)	14.1.0 to before 28.0.2	28.0.2	Patch available	GHSA-mv33-9f6j-pfmc

directus Vendordirectus Affected 10.8.0 to before 11.9.3 Fixed in 11.9.3 Patch available CNA
directus (npm) Vendor— Affected 10.8.0 to before 11.9.3 Fixed in 11.9.3 Patch available GHSA-mv33-9f6j-pfmc
@directus/api (npm) Vendor— Affected 14.1.0 to before 28.0.2 Fixed in 28.0.2 Patch available GHSA-mv33-9f6j-pfmc

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:monospace:directus::::::node.js::*	10.8.0 to before 11.9.3	Vulnerable	directus

cpe:2.3:a:monospace:directus:*:*:*:*:*:node.js:*:* Versions 10.8.0 to before 11.9.3 Vulnerable ·directus

Remediation

Fix · CNA directus (directus) Fixed in 11.9.3
Fix · GHSA-mv33-9f6j-pfmc directus (npm) Fixed in 11.9.3 Advisory →
Fix · GHSA-mv33-9f6j-pfmc @directus/api (npm) Fixed in 28.0.2 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2025-55746
2026-10-03 Alias added: GHSA-mv33-9f6j-pfmc

References

TI-2025-21659 Directus's webhook trigger flows can leak sensitive data CVSS 3.1HIGH 8.6
TI-2024-36266 Directus allows unauthenticated access to WebSocket events and operations CVSS 3.1HIGH 7.5
TI-2024-26791 Directus allows SSO User Enumeration CVSS 3.1HIGH 7.5
TI-2024-23956 Directus is soft-locked by providing a string value to random string util CVSS 3.1HIGH 7.5
TI-2024-26624 Directus Incorrectly handles _in` filter CVSS 3.1HIGH 7.7
TI-2025-21658 Directus `search` query parameter allows enumeration of non permitted fields CVSS 3.1MEDIUM 5.3

See all 55 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences