Vercel AI SDK up to 5.0.51/5.1.0-beta.8 access control

Summaryinfo

A vulnerability classified as critical has been found in Vercel AI SDK up to 5.0.51/5.1.0-beta.8. This vulnerability affects unknown code. This manipulation causes access control. This vulnerability is tracked as CVE-2025-48985. The attack is possible to be carried out remotely. No exploit exists. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability was found in Vercel AI SDK up to 5.0.51/5.1.0-beta.8. It has been declared as critical. Affected by this vulnerability is some unknown processing. The manipulation with an unknown input leads to a access control vulnerability. The CWE definition for the vulnerability is CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta. This issue may have allowed users to bypass filetype whitelists when uploading files. All users are encouraged to upgrade. More details: https://vercel.com/changelog/cve-2025-48985-input-validation-bypass-on-ai-sdk

The advisory is shared at github.com. This vulnerability is known as CVE-2025-48985 since 05/29/2025. The exploitation appears to be difficult. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Neither technical details nor an exploit are publicly available. MITRE ATT&CK project uses the attack technique T1068 for this issue.

Upgrading to version 5.0.52, 5.1.0-beta.9 or 6.0.0-beta eliminates this vulnerability. The upgrade is hosted for download at vercel.com. Applying the patch 930399bb9839a8baf3d349614106d78268775eed is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2025-38188). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Artificial Intelligence Software

Vendor

• Vercel

Name

• AI SDK

Version

• 5.0.0
• 5.0.1
• 5.0.2
• 5.0.3
• 5.0.4
• 5.0.5
• 5.0.6
• 5.0.7
• 5.0.8
• 5.0.9
• 5.0.10
• 5.0.11
• 5.0.12
• 5.0.13
• 5.0.14
• 5.0.15
• 5.0.16
• 5.0.17
• 5.0.18
• 5.0.19
• 5.0.20
• 5.0.21
• 5.0.22
• 5.0.23
• 5.0.24
• 5.0.25
• 5.0.26
• 5.0.27
• 5.0.28
• 5.0.29
• 5.0.30
• 5.0.31
• 5.0.32
• 5.0.33
• 5.0.34
• 5.0.35
• 5.0.36
• 5.0.37
• 5.0.38
• 5.0.39
• 5.0.40
• 5.0.41
• 5.0.42
• 5.0.43
• 5.0.44
• 5.0.45
• 5.0.46
• 5.0.47
• 5.0.48
• 5.0.49
• 5.0.50
• 5.0.51
• 5.1.0-beta.0
• 5.1.0-beta.1
• 5.1.0-beta.2
• 5.1.0-beta.3
• 5.1.0-beta.4
• 5.1.0-beta.5
• 5.1.0-beta.6
• 5.1.0-beta.7
• 5.1.0-beta.8

License

• open-source

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion