COOEY // HUBcompliance · community · intelligence

Exposures › CVE-2025-31125

CVE-2025-31125

Severity
high · on CISA KEV actively exploited
Source
CISA-KEV · kev
Published
2026-01-22
Reference
https://nvd.nist.gov/vuln/detail/CVE-2025-31125
⌖ exploited in the wild shame 50/100 exploited-in-wild

Vite Vitejs contains an improper access control vulnerability that exposes content of non-allowed files using ?inline&import or ?raw?import. Only apps explicitly exposing the Vite dev server to the network (using --host or server.host config option) are affected.

Players implicated

Vite · vendorVitejs · product

Description

Vite Vitejs contains an improper access control vulnerability that exposes content of non-allowed files using ?inline&import or ?raw?import. Only apps explicitly exposing the Vite dev server to the network (using --host or server.host config option) are affected.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.