CVE-2025-67842

The Static Asset API in Mintlify Platform before 2025-11-15 allows remote attackers to inject arbitrary web script or HTML via the subdomain parameter because any tenant's assets can be served on any other tenant's documentation site.

• CWE-829

• https://gist.github.com/hackermondev/5e2cdc32849405fff6b46957747a2d28Third Party Advisory
• https://heartbreak.ingThird Party Advisory
• https://kibty.town/blog/mintlify/Exploit, Third Party Advisory
• https://news.ycombinator.com/item?id=46317098Issue Tracking
• https://www.mintlify.com/blog/working-with-security-researchers-november-2025Vendor Advisory
• https://www.mintlify.com/docs/changelogRelease Notes
• https://kibty.town/blog/mintlify/Exploit, Third Party Advisory

Published

Dec 19, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-67833Paessler PRTG Network Monitor before 25.4.114 allows XSS by …6.1
• CVE-2025-67834Paessler PRTG Network Monitor before 25.4.114 allows XSS by …5.4
• CVE-2025-67835Paessler PRTG Network Monitor before 25.4.114 allows Denial-…6.5
• CVE-2025-6784The Code Engine plugin for WordPress is vulnerable to Remote…8.8
• CVE-2025-67840Multiple authenticated OS command injection vulnerabilities …7.2
• CVE-2025-67841Nordic Semiconductor IronSide SE for nRF54H20 before 23.0.2+…7.5
• CVE-2025-67843A Server-Side Template Injection (SSTI) vulnerability in the…9.8
• CVE-2025-67844The GitHub Integration API in Mintlify Platform before 2025-…4.3
• CVE-2025-67845A Directory Traversal vulnerability in the Static Asset Prox…5.4
• CVE-2025-67846The Deployment Infrastructure in Mintlify Platform before 20…6.5
• CVE-2025-67847A flaw was found in Moodle. An attacker with access to the r…8.8
• CVE-2025-67848A flaw was found in Moodle. This authentication bypass vulne…8.1