PT-2025-25609 · Unknown · Steel Browser

Rpie9O · Published 2025-06-17 · Updated 2025-07-02 · CVE-2025-6152

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Steel Browser versions up to 0.1.3

Description A critical vulnerability was found in Steel Browser, affecting the handleFileUpload function of the file api/src/modules/files/files.routes.ts. The manipulation of the filename argument leads to path traversal. It is possible to initiate the attack remotely.

Recommendations For Steel Browser versions up to 0.1.3, apply the patch named 7ba93a10000fb77ee01731478ef40551a27bd5b9 to fix this issue. As a temporary workaround, consider restricting access to the handleFileUpload function until the patch is applied. Avoid using the filename argument in the affected API endpoint until the issue is resolved.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-6152

Affected Products

Steel Browser

References · 12

• 🔥 https://github.com/steel-dev/steel-browser/issues/129#issuecomment-2936052240 · Exploit
• 🔥 https://github.com/steel-dev/steel-browser/issues/129 · Exploit
• https://github.com/steel-dev/steel-browser/commit/7ba93a10000fb77ee01731478ef40551a27bd5b9 · Patch
• https://osv.dev/vulnerability/CVE-2025-6152 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-6152 · Security Note
• https://twitter.com/VulmonFeeds/status/1934812577931887053 · Twitter Post
• https://vuldb.com/?submit.593060 · Note
• https://vuldb.com/?id.312627 · Note
• https://t.me/cvenotify/127495 · Telegram Post
• https://twitter.com/CVEnew/status/1934807620327440538 · Twitter Post
• https://t.me/cvetracker/26366 · Telegram Post
• https://vuldb.com/?ctiid.312627 · Note