CVE-2025-57799

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-57799

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-57799.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-57799

Aliases

GHSA-qg4r-92hv-g9f4

Published

2025-09-01T15:46:27.137Z

Modified

2026-07-15T01:49:08.653721240Z

Severity

8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator

Summary

StreamVault can perform remote command execution

Details

StreamVault is a multi-platform video parsing and downloading tool. Prior to version 250822, after logging into the StreamVault-system, an attacker can modify certain system parameters, construct malicious commands, execute command injection attacks against the system, and ultimately gain server privileges. Users of all versions of the StreamVault system to date who have not modified their background passwords or use weak passwords are at risk of having their systems taken over via remote command execution. This issue has been patched in version 250822.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/57xxx/CVE-2025-57799.json",
    "cwe_ids": [
        "CWE-78"
    ],
    "cna_assigner": "GitHub_M"
}

References

Affected packages

Git / github.com/lemon8866/streamvault

Affected ranges

Type

GIT

Repo

https://github.com/lemon8866/streamvault

Events

Introduced

Fixed

2e3f1f54b7d8a4e6389b640796866ac1108780ef

Database specific

{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "250822"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-57799.json"