PT-2025-29876 · Romm · Romm

Rilshrink · Published 2025-07-16 · Updated 2025-07-17 · CVE-2025-53908

Positive Technologies (AI Summary)

CVSS v4.0

8.3

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions RomM versions prior to 3.10.3 RomM versions prior to 4.0.0-beta.3

Description RomM, a self-hosted rom manager and player, contains an authenticated path traversal issue in the /api/raw endpoint. This allows for the leakage of passwords and user data potentially stored on the system. The vulnerability affects systems running the latest version of RomM with multiple users, including unprivileged users.

Recommendations Update to RomM version 3.10.3 or later. Update to RomM version 4.0.0-beta.3 or later.

Exploit

Fix

Weakness Enumeration

CWE-26

Related Identifiers

CVE-2025-53908

GHSA-FX9G-XW4J-JWC3

Affected Products

Romm

References · 10

• 🔥 https://github.com/rommapp/romm/security/advisories/GHSA-fx9g-xw4j-jwc3 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53908.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-53908 · Security Note
• https://osv.dev/vulnerability/CVE-2025-53908 · Vendor Advisory
• https://github.com/rommapp/romm/blob/4.0.0-beta.2/backend/endpoints/raw.py#L31 · Note
• https://github.com/rommapp/romm/commit/7c94cb05e74ddb6a6af7b82320686c01754e9966 · Note
• https://github.com/rommapp/romm/commit/baa1a9759079c36e36a9f10c920c46b57d0b6151 · Note
• https://twitter.com/VulmonFeeds/status/1945699372936601655 · Twitter Post
• https://twitter.com/CVEnew/status/1945578778941587843 · Twitter Post
• https://t.me/cvetracker/27999 · Telegram Post