What is the CVSS score of CVE-2025-67289?

CVE-2025-67289 has a CVSS 3.1 base score of 9.6 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.4%.

Which versions of Frappe Framework are affected by CVE-2025-67289?

Frappe Framework 15.89.0 and ERPNext deployments are vulnerable to critical code execution through malicious file uploads (CVE-2025-67289), allowing attackers to compromise systems and access…

Is there a public PoC exploit available for CVE-2025-67289?

Yes, a public proof-of-concept exploit is available for CVE-2025-67289. Prioritise patching immediately. EPSS: 0.4%.

How to fix or mitigate CVE-2025-67289?

Within 24 hours: (1) Disable XML/SVG file uploads in the Attachments module; (2) Issue security alert to all ERPNext users warning against opening attachments from untrusted sources; (3) Enable and review audit logs for recent attachment uploads and access. Within 7 days: (1) Perform comprehensive audit of existing attachments for suspicious XML/SVG files; (2) Inventory all Frappe Framework instances and document versions; (3) Implement strict file-type whitelist allowing only Office documents, PDFs, and standard image formats (.pdf, .docx, .xlsx, .pptx, .jpg, .png). Within 30 days: (1) Monitor Frappe vendor security advisories for patch availability; (2) Plan upgrade path to patched version once released; (3) Deploy Web Application Firewall rules to filter SVG/XML content from uploads as defense-in-depth.

Frappe Framework CVE-2025-67289

CRITICAL

Cross-site Scripting (XSS) (CWE-79)

2025-12-22 cve@mitre.org

File Upload XSS RCE Erpnext Frappe

9.6

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

9.6 CRITICAL

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

vuln.today AI

8.7 HIGH

Attachment upload realistically needs an account (PR:L) and a victim must view the file (UI:R); XSS crosses into the session context (S:C) with high C/I but no direct availability impact.

3.1 AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:H/SI:H/SA:N

Primary rating from Vendor (mitre).

CVSS VectorVendor: mitre

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 05, 2026 - 03:31 vuln.today

DescriptionCVE.org

An arbitrary file upload vulnerability in the Attachments module of Frappe Framework v15.89.0 allows attackers to execute arbitrary code via uploading a crafted XML file.

AnalysisAI

Stored cross-site scripting leading to code execution in Frappe Framework 15.89.0 (and the ERPNext application built on it) lets attackers upload a crafted XML/SVG file through the Attachments module that runs attacker-controlled script when a victim views it. Tagged as XSS/RCE/File Upload with a publicly available exploit code, though EPSS remains low at 0.44% (35th percentile) and it is not on CISA KEV. The CVSS 9.6 rating reflects a scope-changing, user-interaction-dependent attack rather than direct server-side compromise.

Technical ContextAI

Frappe Framework is an open-source, Python/JavaScript full-stack web framework that underpins the ERPNext ERP suite; the CPE data confirms both cpe:2.3:a:frappe:frappe:15.89.0 and cpe:2.3:a:frappe:erpnext:15.89.0 are affected. The root-cause class is CWE-79 (Improper Neutralization of Input During Web Page Generation, i.e. cross-site scripting), and the vector combined with the 'crafted XML file' detail indicates the Attachments module fails to sanitize or restrict uploaded file content (classically an SVG/XML payload containing embedded script). When such a file is rendered or served inline in a browser session, the embedded script executes in the context of the application, which is how 'arbitrary code' execution is achieved - script execution in the victim's authenticated browser session, not native server code execution.

RemediationAI

No vendor-released patch version is identified in the available data, so the actionable step is to upgrade Frappe Framework and ERPNext to the latest maintained release above 15.89.0 and monitor http://frappe.com and the Frappe GitHub security advisories for the exact fixed version before deploying. As compensating controls until patched: force all user-uploaded attachments to be served with Content-Disposition: attachment (download rather than inline render) and a restrictive Content-Security-Policy to neutralize embedded script, which prevents in-browser execution at the cost of losing inline preview; block or reject SVG/XML uploads at the reverse proxy or in the Attachments allow-list, accepting that legitimate SVG/XML attachments will be refused; and restrict attachment upload permissions to trusted roles to shrink the pool of potential submitters. Do not treat the public exploit README (https://github.com/vuquyen03/CVE/blob/main/CVE-2025-67289/README.md) as guidance - it is offensive proof-of-concept material.