VULNERABILITY INTELLIGENCE

CVE-2025-67843

CVSS score9.8 CRITICAL

EPSS probability1.11%

CISA KEVNot currently listed

Published2025-12-19

Last modified2026-06-17

Description

A Server-Side Template Injection (SSTI) vulnerability in the MDX Rendering Engine in Mintlify Platform before 2025-11-15 allows remote attackers to execute arbitrary code via inline JSX expressions in an MDX file.