VULNERABILITY INTELLIGENCE

CVE-2025-66402

CVSS score6.5 MEDIUM
EPSS probability0.31%
CISA KEVNot currently listed
Published2025-12-16
Last modified2026-10-14
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

Misskey is an open source, federated social media platform. Starting in version 13.0.0-beta.16 and prior to version 2025.12.0, an actor who does not have permission to view favorites or clips can can export the posts and view the contents. Version 2025.12.0 fixes the issue.

Weakness classification

  • security-advisories@github.com: CWE-862

Primary references