What is CVE-2025-67811?

CVE-2025-67811 is a medium-severity vulnerability in Area9lyceum Rhapsode, classified under SQL Injection. CVSS score: 6.5/10. Published 2026-01-09.

How severe is CVE-2025-67811?

Medium severity. CVSS v3 base score is 6.5 out of 10.

SQL Injection in Area9lyceum Rhapsode

CVE-2025-67811

Area9 Rhapsode 1.47.3 allows SQL Injection via multiple API endpoints accessible to authenticated users. Insufficient input validation allows remote attackers to inject arbitrary SQL commands, resulting in unauthorized database access and potential compromise of sensitive data. Fixed in v.1.47.4 and beyond.

Vulnerability class: SQL Injection

EPSS: 0.003 (18.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N.

Affected products

Area9lyceum Rhapsode — versions 1.47.3
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (Broken Link)
cve@mitre.org (Vendor Advisory)

Frequently asked questions

What is CVE-2025-67811?: CVE-2025-67811 is a medium-severity vulnerability in Area9lyceum Rhapsode, classified under SQL Injection. CVSS score: 6.5/10. Published 2026-01-09.
How severe is CVE-2025-67811?: Medium severity. CVSS v3 base score is 6.5 out of 10.