Path Traversal in Cvat-ai Cvat

CVE-2025-64485

CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.4.0 through 2.48.1, a malicious CVAT user with at least the User global role may create files in the root of the mounted file share, or o…

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.004 (27.6th percentile) — read the EPSS interpretation.