Vulnerabilities in SimStudioAI
11 resultsCVE-2025-7107MEDIUMSimStudioAI sim route.ts handleLocalFile path traversalEPSS 0.8%CVE-2025-15099MEDIUMsimstudioai sim CRON Secret internal.ts improper authenticationEPSS 0.7%CVE-2025-10097MEDIUMSimStudioAI sim route.ts code injectionEPSS 0.7%CVE-2025-9801MEDIUMSimStudioAI sim path traversalEPSS 0.7%CVE-2025-7114MEDIUMSimStudioAI sim Session route.ts POST missing authenticationEPSS 0.5%CVE-2026-3431CRITICALSim Studio AI - MongoDB SSRF and Arbitrary Document DeletionEPSS 0.4%CVE-2026-3432CRITICALSim Studio AI - Unauthenticated OAuth Token TheftEPSS 0.3%CVE-2025-9800MEDIUMSimStudioAI sim HTML File route.ts import unrestricted uploadEPSS 0.3%CVE-2025-9805MEDIUMSimStudioAI sim route.ts server-side request forgeryEPSS 0.3%CVE-2025-10096MEDIUMSimStudioAI sim route.ts server-side request forgeryEPSS 0.3%CVE-2026-13510MEDIUMSimStudioAI sim Password Protection deployment.ts weak hashEPSS 0.2%