PT-2025-39909 · Sqlite3+1 · Sqlite3+1

Eharris128 · Published 2025-09-29 · Updated 2025-10-27 · CVE-2025-59163

Positive Technologies (AI Summary)

CVSS v4.0

2.1

Low

Base vector

AV:N/AC:H/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions vet versions prior to 1.12.5

Description The software is susceptible to a DNS rebinding attack because of missing HTTP Host and Origin header validation. When used as an MCP server in SSE mode with default ports, the sqlite3 database containing scan data may be exposed to remote attackers. An attacker can leverage DNS rebinding to access the vet SSE server on 127.0.0.1 through a website and use MCP tools to read information from the report database. The vulnerable component is the SSE server. The API endpoint used for exploitation is not specified. The vulnerable parameters are the Host and Origin headers.

Recommendations Update to version 1.12.5 or later. Use stdio transport for the SSE server.

Exploit

Fix

Weakness Enumeration

CWE-350

Related Identifiers

CVE-2025-59163

GHSA-6Q9C-M9FR-865M

GO-2025-3986

OPENSUSE-SU-2025:15666-1

SUSE-SU-2025:3799-1

Affected Products

Sqlite3

Vet

References · 51

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/59xxx/CVE-2025-59163.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:3799-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-59163 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15666-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-6q9c-m9fr-865m · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-59163 · Security Note
• https://osv.dev/vulnerability/GO-2025-3986 · Vendor Advisory
• https://github.com/safedep/vet/security/advisories/GHSA-6q9c-m9fr-865m · Note
• https://github.com/safedep/vet/releases/tag/v1.12.5 · Note
• https://github.com/safedep/vet/commit/0ae3560ba11846375812377299fe078d45cc3d48 · Note
• https://github.com/safedep/vet · Note
• https://twitter.com/VulmonFeeds/status/1972795208052969939 · Twitter Post
• https://suse.com/security/cve/CVE-2025-59346 · Note
• https://suse.com/security/cve/CVE-2024-58267 · Note
• https://suse.com/security/cve/CVE-2025-59348 · Note