VDB

CVE-2025-58355

CVE-2025-58355 PUBLISHED CVSS 7.699999809265137 HIGH

Soft Serve vulnerable to arbitrary file writing through SSH API

EPSS 0.12% · 30.0th percentile

Risk Scores

CVSS 3.1
7.699999809265137
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
EPSS Score
0.12%
30.0th percentile

Affected Products

VendorProductVersions
charmbraceletsoft-serve*
github.comcharmbracelet/soft-serve0

Timeline

  • Jan 21, 1970 Security Advisory
  • Sep 2, 2025 CVE Published
  • Sep 4, 2025 CVE Updated
  • Sep 4, 2025 EPSS Score
  • Sep 4, 2025 PoC Published
  • Sep 12, 2025 EPSS Score
  • Sep 19, 2025 EPSS Score
  • Sep 27, 2025 EPSS Score
  • Oct 4, 2025 EPSS Score
  • Oct 4, 2025 Coalition ESS Score
  • Oct 6, 2025 Coalition ESS Score
  • Oct 12, 2025 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›