Director

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-46068 HIGH This Week

Director versions up to 25.2.0 is affected by unrestricted upload of file with dangerous type (CVSS 8.8).

File Upload RCE Director

NVD GitHub

CVSS 3.1

8.8

EPSS

0.3%

CVE-2025-46067 HIGH This Week

An issue in Automai Director v.25.2.0 allows a remote attacker to escalate privileges and obtain sensitive information via a crafted js file [CVSS 8.2 HIGH]

Authentication Bypass Director

NVD GitHub

CVSS 3.1

8.2

EPSS

0.1%

CVE-2025-46066 CRITICAL Act Now

Automai Director v25.2.0 allows authenticated users to escalate to full administrative privileges with scope change (CVSS 9.9). Low-privileged users can take complete control of the automation platform.

Privilege Escalation Director

NVD GitHub

CVSS 3.1

9.9

EPSS

0.1%

CVE-2025-46068

EPSS 0% CVSS 8.8

HIGH This Week

Director versions up to 25.2.0 is affected by unrestricted upload of file with dangerous type (CVSS 8.8).

File Upload RCE Director

NVD GitHub

CVE-2025-46067

EPSS 0% CVSS 8.2

HIGH This Week

An issue in Automai Director v.25.2.0 allows a remote attacker to escalate privileges and obtain sensitive information via a crafted js file [CVSS 8.2 HIGH]

Authentication Bypass Director

NVD GitHub

CVE-2025-46066

EPSS 0% CVSS 9.9

CRITICAL Act Now

Privilege Escalation Director

NVD GitHub