What is CVE-2025-57325?

CVE-2025-57325 is a high-severity vulnerability in Rollbar, classified under Improperly Controlled Modification of Object Prototype Attributes (Prototype Pollution). CVSS score: 7.5/10. Published 2025-09-24.

How severe is CVE-2025-57325?

High severity. CVSS v3 base score is 7.5 out of 10.

Is CVE-2025-57325 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Prototype Pollution in Rollbar

CVE-2025-57325

rollbar is a package designed to effortlessly track and debug errors in JavaScript applications. This package includes advanced error tracking features and an intuitive interface to help you identify and fix issues more quickly. A Prototype Pollution vulnerability in the utility.set function of rollbar v2.26.4 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service (DoS) as the minimum consequence.

Vulnerability class: Prototype Pollution

EPSS: 0.004 (29.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Rollbar
N/a — versions n/a

Weakness classification (CWE)

CWE-1321 — Improperly Controlled Modification of Object Prototype Attributes (Prototype Pollution)

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

cve@mitre.org (Broken Link)
cve@mitre.org (Third Party Advisory)

Frequently asked questions

What is CVE-2025-57325?: CVE-2025-57325 is a high-severity vulnerability in Rollbar, classified under Improperly Controlled Modification of Object Prototype Attributes (Prototype Pollution). CVSS score: 7.5/10. Published 2025-09-24.
How severe is CVE-2025-57325?: High severity. CVSS v3 base score is 7.5 out of 10.
Is CVE-2025-57325 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.