CVE-2025-51463

Published July 22nd, 2025

View on NVD ↗

CVSS v3

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

Path Traversal in restore_run_backup() in AIM 3.28.0 allows remote attackers to write arbitrary files to the server's filesystem via a crafted backup tar file submitted to the run_instruction API, which is extracted without path validation during restoration.

aimhubio/aim

Aim 💫 — An easy-to-use & supercharged open-source experiment tracker.

GitHub

6.14K