PT-2025-41615 · Cel-Rust · Cel-Rust

Howardjohn · Published 2025-10-10 · Updated 2025-10-15 · CVE-2025-62162

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions cel-rust versions 0.10.0 through 0.11.3

Description cel-rust is a Common Expression Language interpreter written in Rust. Parsing specific, malformed Common Expression Language (CEL) expressions can cause the parser to terminate unexpectedly. If used to evaluate untrusted expressions, such as user-supplied input received through an API, an attacker can send crafted input to trigger a denial of service (DoS).

Recommendations Update to version 0.11.4 or later.

Exploit

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-62162

GHSA-WXWX-9FH7-5MRW

Affected Products

Cel-Rust

References · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/62xxx/CVE-2025-62162.json · Exploit
• 🔥 https://github.com/cel-rust/cel-rust/security/advisories/GHSA-wxwx-9fh7-5mrw · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-62162 · Security Note
• https://osv.dev/vulnerability/CVE-2025-62162 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-wxwx-9fh7-5mrw · Vendor Advisory
• https://github.com/cel-rust/cel-rust/commit/9df9822d81d91a3ce0fc9f712f4574a659247be3 · Note
• https://github.com/cel-rust/cel-rust · Note
• https://github.com/cel-rust/cel-rust/releases/tag/cel-v0.11.4 · Note
• https://t.me/cveNotify/138552 · Telegram Post
• https://reddit.com/r/VulnMatter/comments/1o7bmsg/resumen_diario_de_vulnerabilidades_15102025 · Reddit Post
• https://reddit.com/r/VulnMatter/comments/1o5knot/resumen_diario_de_vulnerabilidades_13102025 · Reddit Post
• https://twitter.com/CVEnew/status/1976780273497821403 · Twitter Post
• https://twitter.com/CveTodo/status/1976791981272469682 · Twitter Post
• https://reddit.com/r/VulnMatter/comments/1o42xq1/resumen_diario_de_vulnerabilidades_11102025 · Reddit Post
• https://t.me/cveNotify/138295 · Telegram Post