What is CVE-2025-66410?

CVE-2025-66410 is a critical-severity vulnerability in Flipped-aurora Gin-vue-admin, classified under Path Traversal. CVSS score: 9.1/10. Published 2025-12-01.

How severe is CVE-2025-66410?

Critical severity. CVSS v3 base score is 9.1 out of 10.

Path Traversal in Flipped-aurora Gin-vue-admin

CVE-2025-66410

Gin-vue-admin is a backstage management system based on vue and gin. In 2.8.6 and earlier, attackers can delete any file on the server at will, causing damage or unavailability of server resources. Attackers can control the 'FileMd5' param…

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.005 (38.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H.

Affected products

Flipped-aurora Gin-vue-admin — versions <= 2.8.6
Gin-vue-admin_project Gin-vue-admin

Weakness classification (CWE)

CWE-22 — Path Traversal

References

security-advisories@github.com (x_refsource_CONFIRM, Exploit, Vendor Advisory)
security-advisories@github.com (Patch, x_refsource_MISC)

Frequently asked questions

What is CVE-2025-66410?: CVE-2025-66410 is a critical-severity vulnerability in Flipped-aurora Gin-vue-admin, classified under Path Traversal. CVSS score: 9.1/10. Published 2025-12-01.
How severe is CVE-2025-66410?: Critical severity. CVSS v3 base score is 9.1 out of 10.