MEDIUM
A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta
Published Nov 7, 2025
5.3
MEDIUMCVSS 3.1
EPSS 0.27%
Description
A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta. This issue may have allowed users to bypass filetype whitelists when uploading files. All users are encouraged to upgrade. More details: https://vercel.com/changelog/cve-2025-48985-input-validation-bypass-on-ai-sdk
Affected products
-
- Version 5.0.51StatusaffectedConstraints<=5.0.51
- Version 5.1.0-beta.8StatusaffectedConstraints<=5.1.0-beta.8
- Version 5.0.52StatusunaffectedConstraints<5.0.52
- Version 5.1.0-beta.9StatusunaffectedConstraints<5.1.0-beta.9
- Version 6.0.0-beta.*StatusunaffectedConstraints<6.0.0-beta.*
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
No data.
No Red Hat product state for this CVE.
ai
npm
Introduced 0 Fixed 5.0.52ai
npm
Introduced 5.1.0-beta.0 Fixed 5.1.0-beta.9
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | ai | 0 | 5.0.52 |
| npm | ai | 5.1.0-beta.0 | 5.1.0-beta.9 |
Remediation
No remediation recorded yet.
Weaknesses (2)
References (6)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-38188 Advisory
- https://github.com/advisories/GHSA-rwvc-j5jr-mgvh Advisory
- https://github.com/vercel/ai/commit/930399bb9839a8baf3d349614106d78268775eed Patch
- https://github.com/vercel/ai/issues/8881
- https://nvd.nist.gov/vuln/detail/CVE-2025-48985
- https://vercel.com/changelog/cve-2025-48985-input-validation-bypass-on-ai-sdk Vendor Advisory
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner hackerone
Published Nov 7, 2025
Updated Dec 1, 2025
Reserved May 29, 2025
Link CVE-2025-48985
CISA Vulnrichment
Updated Nov 7, 2025
ENISA EUVD
EUVD-2025-38188 GHSA-RWVC-J5JR-MGVH Assigner hackerone
Published Nov 7, 2025
Updated Dec 1, 2025
Exploited since n/a
Link EUVD-2025-38188