CVE-2025-51479

Description

References

• onyx-dot-app/onyx · Product
• onyx-dot-app/onyx#4714 · Exploit
• gecko.security/blog/cve-2025-51479 · Exploit

More vulnerabilities in onyx

• CVE-2026-42277MEDIUM 6.5Onyx is an open-source AI platform. Prior to versions 3.0.9, 3.1.6, and 3.2.6, the GET /chat/file/{file_id} endpoint allows any authenticate…
• CVE-2026-42276MEDIUM 4.3Onyx is an open-source AI platform. Prior to versions 3.0.9, 3.1.6, and 3.2.6, the POST /chat/stop-chat-session/{chat_session_id} endpoint l…
• CVE-2025-7894CRITICAL 9.8A vulnerability, which was classified as critical, has been found in Onyx up to 0.29.1. This issue affects the function generate_simple_sql …
• CVE-2024-9612MEDIUM 6.5In danswer-ai/danswer v0.3.94, administrators can set the visibility of pages within a workspace, including the search page. When the search…
• CVE-2024-7767HIGH 8.1An improper access control vulnerability exists in danswer-ai/danswer version v0.3.94. This vulnerability allows the first user created in t…