What is CVE-2025-0190?

CVE-2025-0190 is a high-severity vulnerability in Aimhubio Aimhubio/aim, classified under CWE-1049. CVSS score: 7.5/10. Published 2025-03-20.

How severe is CVE-2025-0190?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Aimhubio Aimhubio/aim

CVE-2025-0190

In version 3.25.0 of aimhubio/aim, a denial of service vulnerability exists. By tracking a large number of `Text` objects and then querying them simultaneously through the web API, the Aim web server becomes unresponsive to other requests for an extended period while processing and returning these objects. This vulnerability can be exploited repeatedly, leading to a complete denial of service.

EPSS: 0.006 (44.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Aimhubio Aimhubio/aim — versions unspecified
Aimstack Aim — versions 3.25.0

Weakness classification (CWE)

CWE-1049

References

security@huntr.dev (Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2025-0190?: CVE-2025-0190 is a high-severity vulnerability in Aimhubio Aimhubio/aim, classified under CWE-1049. CVSS score: 7.5/10. Published 2025-03-20.
How severe is CVE-2025-0190?: High severity. CVSS v3 base score is 7.5 out of 10.