{"id":"CVE-2025-48985","aliases":["EUVD-2025-38188","GHSA-rwvc-j5jr-mgvh"],"status":"published","title":"Vercel’s AI SDK's filetype whitelists can be bypassed when uploading files","description":"A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta. This issue may have allowed users to bypass filetype whitelists when uploading files. All users are encouraged to upgrade.\r\n\r\nMore details: https://vercel.com/changelog/cve-2025-48985-input-validation-bypass-on-ai-sdk","severity":{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00284,"percentile":0.21052,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20","CWE-682"],"published":"2025-11-07T00:43:28Z","modified":"2026-10-28T02:30:46Z","fixes":[{"ecosystem":"npm","package":"ai","fixed_in":["5.0.52","5.1.0-beta.9"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"ai","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.52"}]}]},{"source":"ghsa","ecosystem":"npm","package":"ai","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.0-beta.0"},{"fixed":"5.1.0-beta.9"}]}]},{"source":"osv","ecosystem":"npm","package":"ai","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"5.0.52"}]}]},{"source":"osv","ecosystem":"npm","package":"ai","ranges":[{"type":"SEMVER","events":[{"introduced":"5.1.0-beta.0"},{"fixed":"5.1.0-beta.9"}]}]}],"products":[{"vendor":"vercel","product":"ai"},{"vendor":"vercel","product":"ai sdk"}],"references":[{"url":"https://github.com/vercel/ai/commit/930399bb9839a8baf3d349614106d78268775eed","tags":["Patch","fix","web"]},{"url":"https://vercel.com/changelog/cve-2025-48985-input-validation-bypass-on-ai-sdk","tags":["Vendor Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-48985","tags":["advisory"]},{"url":"https://github.com/vercel/ai/issues/8881","tags":["web"]},{"url":"https://github.com/advisories/GHSA-rwvc-j5jr-mgvh"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/48xxx/CVE-2025-48985.json","tags":["advisory"]},{"url":"https://github.com/vercel/ai","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2025-48985","description":"A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta. This issue may have allowed users to bypass filetype whitelists when uploading files. All users are encouraged to upgrade.\r\n\r\nMore details: https://vercel.com/changelog/cve-2025-48985-input-validation-bypass-on-ai-sdk","status":"published","published":"2025-11-07T00:43:28.027Z","modified":"2025-12-01T20:12:57.508Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:32:41.089134Z"}],"euvd":[{"id":"EUVD-2025-38188","description":"A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta. This issue may have allowed users to bypass filetype whitelists when uploading files. All users are encouraged to upgrade.\r\n\r\nMore details: https://vercel.com/changelog/cve-2025-48985-input-validation-bypass-on-ai-sdk","status":"published","published":"2025-11-07T00:43:28Z","modified":"2025-12-01T20:12:57Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T19:49:11.471499Z"}],"ghsa":[{"id":"GHSA-rwvc-j5jr-mgvh","title":"Vercel’s AI SDK's filetype whitelists can be bypassed when uploading files","description":"A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta. This issue may have allowed users to bypass filetype whitelists when uploading files. All users are encouraged to upgrade.","status":"published","published":"2025-11-07T03:30:25Z","modified":"2025-12-02T01:27:16Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-20","CWE-682"],"updated_at":"2026-11-02T14:39:11.110487Z"}],"nvd":[{"id":"CVE-2025-48985","description":"A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta. This issue may have allowed users to bypass filetype whitelists when uploading files. All users are encouraged to upgrade.\r\n\r\nMore details: https://vercel.com/changelog/cve-2025-48985-input-validation-bypass-on-ai-sdk","status":"published","published":"2025-11-07T01:15:36.567Z","modified":"2026-10-07T21:10:00.2Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:11:42.870953Z"}],"osv":[{"id":"CVE-2025-48985","description":"A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta. This issue may have allowed users to bypass filetype whitelists when uploading files. All users are encouraged to upgrade.\r\n\r\nMore details: https://vercel.com/changelog/cve-2025-48985-input-validation-bypass-on-ai-sdk","status":"published","published":"2025-11-07T00:43:28.027Z","modified":"2026-10-28T02:30:46.989670719Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:44:50.037003Z"},{"id":"GHSA-rwvc-j5jr-mgvh","title":"Vercel’s AI SDK's filetype whitelists can be bypassed when uploading files","description":"A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta. This issue may have allowed users to bypass filetype whitelists when uploading files. All users are encouraged to upgrade.","status":"published","published":"2025-11-07T03:30:25Z","modified":"2026-09-10T03:50:58.597326499Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-20","CWE-682"],"updated_at":"2026-11-02T15:46:56.639206Z"}]}}