PT-2025-39216 · Flagforge · Flagforge

Aryan4859 · CVE-2025-59826 · Published 2025-09-23 · Updated 2025-10-08

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L

Name of the Vulnerable Software and Affected Versions Flag Forge versions prior to 2.2.0

Description Flag Forge is a Capture The Flag (CTF) platform. Non-admin users are able to create arbitrary challenges, which could lead to the introduction of malicious, incorrect, or misleading content.

Recommendations Update to version 2.2.0 or later.

Exploit

Fix

LPE

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-59826

GHSA-Q7PG-QCHV-3PC5

Affected Products

Flagforge

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/59xxx/CVE-2025-59826.json · Exploit
• https://github.com/FlagForgeCTF/flagForge/security/advisories/GHSA-q7pg-qchv-3pc5 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-59826 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-59826 · Security Note
• https://twitter.com/NightfallCVE/status/1971206336416550945 · Twitter Post
• https://t.me/CVEtracker/33206 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1970664740515967283 · Twitter Post
• https://twitter.com/CVEnew/status/1970621783381540908 · Twitter Post
• https://t.me/cveNotify/137841 · Telegram Post
• https://t.me/cveNotify/136206 · Telegram Post