Arbitrary file upload in Rommapp Romm

CVE-2025-54071

RomM (ROM Manager) allows users to scan, enrich, browse and play their game collections with a clean and responsive interface. In versions 4.0.0-beta.3 and below, an authenticated arbitrary file write vulnerability exists in the /api/saves…

Vulnerability class: Unrestricted File Upload

EPSS: 0.007 (47.7th percentile) — read the EPSS interpretation.