CVAT CVE-2025-68430

Requires a valid authenticated account on the CVAT instance (PR:L) and that the target reach the /api/server/share endpoint, which serves the configured SHARE_ROOT directory; the attacker supplies path-traversal input ('../') to resolve outside SHARE_ROOT. Affects CVAT 2.8.1 through 2.52.0 (fixed in 2.53.0), with no known workaround. Limiting factors: exploitation is bounded to authenticated users, yields only the names of files and subdirectories (file contents remain inaccessible), and depends on the share endpoint being deployed/reachable.

This is a genuine but moderate-severity information-disclosure flaw, not a high-urgency priority. The vendor-supplied CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N/VC:L with VI:N/VA:N/no scope change) is internally consistent with the description: network-reachable, low complexity, but requires an authenticated account (PR:L) and yields only LOW confidentiality impact - exposure of directory and file names, not file contents. All exploitation signals agree on 'low real risk': EPSS is 0.29% (20th percentile), there is no CISA KEV listing, and no public exploit code is referenced (only the vendor's own regression test accompanying the fix). No SSVC decision data was provided. The one caveat is that the raw description says 'an attacker with an account,' which the CVSS correctly encodes as PR:L - so the authentication requirement is confirmed, not inferred. Net: a legitimate low-privilege-authenticated directory-enumeration bug worth patching in the normal cycle, not an emergency.

An attacker who has registered or obtained any low-privilege account on a CVAT instance sends a crafted request to the /api/server/share endpoint containing path-traversal sequences (e.g. '../'), causing the server to resolve a path outside the intended SHARE_ROOT and list the names of files and subdirectories elsewhere on the server's filesystem. No public exploit code was identified, though the fix commit includes a test demonstrating the '../' input. The attack is remote and low-complexity but constrained to an authenticated user and discloses only names, not contents.