What is CVE-2025-10643?

CVE-2025-10643 is a critical-severity vulnerability in Wondershare Repairit, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 9.1/10. Published 2025-09-17.

How severe is CVE-2025-10643?

Critical severity. CVSS v3 base score is 9.1 out of 10.

Vulnerability in Wondershare Repairit

CVE-2025-10643

Wondershare Repairit Incorrect Permission Assignment Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Wondershare Repairit. Authentication is not required to exploit this vulnerability. The specific flaw exists within the permissions granted to a storage account token. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-26902.

EPSS: 0.028 (85.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N.

Affected products

Wondershare Repairit — versions 6.5.2

Weakness classification (CWE)

CWE-732 — Incorrect Permission Assignment for Critical Resource

References

zdi-disclosures@trendmicro.com (x_research-advisory, Third Party Advisory)

Frequently asked questions

What is CVE-2025-10643?: CVE-2025-10643 is a critical-severity vulnerability in Wondershare Repairit, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 9.1/10. Published 2025-09-17.
How severe is CVE-2025-10643?: Critical severity. CVSS v3 base score is 9.1 out of 10.