CVE-2025-61586 MEDIUM

CVE-2025-61586: FreshRSS is vulnerable to directory enumeration by setting path in its theme field

Vendor Freshrss
Product FreshRSS
Weakness CWE-22 · Path traversal
Published September 29, 2025
Last update September 30, 2025
View on NVD All CVEs

CVSS base score

6.9/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below are vulnerable to directory enumeration by setting path in theme field, allowing attackers to gain additional information about the server by checking if certain directories exist. This issue is fixed in version 1.27.0.

Key dates

02Disclosure timeline

September 29, 2025 CVE published
September 30, 2025 Record updated