What is CVE-2025-64712?

CVE-2025-64712 is a critical-severity vulnerability in Unstructured, classified under Path Traversal. CVSS score: 9.8/10. Published 2026-02-04.

How severe is CVE-2025-64712?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Path Traversal in Unstructured

CVE-2025-64712

The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. Prior to version 0.18.18, a path traversal vulnerability in the partition_ms…

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.006 (45.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Unstructured
Unstructured-io Unstructured — versions < 0.18.18

Weakness classification (CWE)

References

security-advisories@github.com (x_refsource_CONFIRM, Mitigation, Vendor Advisory)
security-advisories@github.com (Patch, x_refsource_MISC)

Frequently asked questions

What is CVE-2025-64712?: CVE-2025-64712 is a critical-severity vulnerability in Unstructured, classified under Path Traversal. CVSS score: 9.8/10. Published 2026-02-04.
How severe is CVE-2025-64712?: Critical severity. CVSS v3 base score is 9.8 out of 10.