CVE-2025-6774

A vulnerability was found in gooaclok819 sublinkX up to 1.8. It has been rated as critical. Affected by this issue is the function AddTemp of the file api/template.go. The manipulation of the argument filename leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.9 is able to address this issue. The patch is identified as 778d26aef723daa58df98c8060c43f5bf5d1b10b. It is recommended to upgrade the affected component.

• CWE-22

• https://github.com/gooaclok819/sublinkX/commit/778d26aef723daa58df98c8060c43f5bf5d1b10b
• https://github.com/gooaclok819/sublinkX/issues/68#issuecomment-2957290524
• https://github.com/gooaclok819/sublinkX/issues/69
• https://github.com/gooaclok819/sublinkX/releases/tag/1.9
• https://vuldb.com/?ctiid.314090
• https://vuldb.com/?id.314090
• https://vuldb.com/?submit.602369

Published

Jun 27, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-67734Frappe Learning Management System (LMS) is a learning system…5.4
• CVE-2025-67735Netty is an asynchronous, event-driven network application f…6.5
• CVE-2025-67736The FreePBX module tts (Text to Speech) for FreePBX, an open…7.2
• CVE-2025-67737AzuraCast is a self-hosted, all-in-one web radio management …3.7
• CVE-2025-67738squid/cachemgr.cgi in Webmin before 2.600 does not properly …8.5
• CVE-2025-67739In JetBrains TeamCity before 2025.11.2 improper repository U…3.1
• CVE-2025-67740In JetBrains TeamCity before 2025.11 improper access control…5.3
• CVE-2025-67741In JetBrains TeamCity before 2025.11 stored XSS was possible…5.4
• CVE-2025-67742In JetBrains TeamCity before 2025.11 path traversal was poss…7.5
• CVE-2025-67743Local Deep Research is an AI-powered research assistant for …6.5
• CVE-2025-67744DeepChat is an open-source artificial intelligence agent pla…9.6
• CVE-2025-67745MyHoard is a daemon for creating, managing and restoring MyS…7.5