PT-2025-44434 · Aixblock · Aixblock

Published 2025-10-30 · Updated 2025-10-30 · CVE-2025-60950

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions AIxBlock commit f60975

Description An arbitrary file upload issue exists in the Data Preparation function. Successful exploitation of this issue allows attackers to execute arbitrary code by uploading a crafted SVG file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-60950

Affected Products

Aixblock

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-60950 · Security Note
• https://github.com/AIxBlock-2023/awesome-ai-dev-platform-opensource/issues/101 · Note
• https://github.com/AIxBlock-2023/awesome-ai-dev-platform-opensource/pull/172/commits/f60975d58215db83d5d111bd50a86e269c228081 · Note
• https://app.aixblock.io/temp/dbdf9e79_payload1.svg · Note
• https://twitter.com/CVEnew/status/1983945809516490763 · Twitter Post