What is CVE-2025-61301?

CVE-2025-61301 is a high-severity vulnerability in N/a, classified under Uncontrolled Resource Consumption. CVSS score: 7.5/10. Published 2025-10-20.

How severe is CVE-2025-61301?

High severity. CVSS v3 base score is 7.5 out of 10.

Is CVE-2025-61301 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Resource exhaustion in N/a

CVE-2025-61301

Denial-of-analysis in reporting/mongodb.py and reporting/jsondump.py in CAPEv2 (commit 52e4b43, on 2025-05-17) allows attackers who can submit samples to cause incomplete or missing behavioral analysis reports by generating deeply nested or oversized behavior data that trigger MongoDB BSON limits or orjson recursion errors when the sample executes in the sandbox.

Vulnerability class: DoS (Denial of Service)

EPSS: 0.003 (25.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

N/a — versions n/a

Weakness classification (CWE)

CWE-400 — Uncontrolled Resource Consumption

Public proof-of-concept exploits

eGkritsis/CVE-2025-61301

References

Frequently asked questions

What is CVE-2025-61301?: CVE-2025-61301 is a high-severity vulnerability in N/a, classified under Uncontrolled Resource Consumption. CVSS score: 7.5/10. Published 2025-10-20.
How severe is CVE-2025-61301?: High severity. CVSS v3 base score is 7.5 out of 10.
Is CVE-2025-61301 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.