CVE-2025-65097

MEDIUM 6.5CVE-2025-65097 · Published 03/12/2025 · updated 25/09/2026

In short

CVE-2025-65097 is a MEDIUM (CVSS 6.5) vulnerability affecting romm (romm.app).
Chance of exploitation in the next 30 days (EPSS): 0.22%, higher than 12.9% of all vulnerabilities.
Fix: update to 4.4.1 or later.

Package	Affected versions	Patched versions
romm romm.app	`= 4.4.1< 4.4.1`	`4.4.1`

Description

RomM (ROM Manager) allows users to scan, enrich, browse and play their game collections with a clean and responsive interface. Prior to 4.4.1 and 4.4.1-beta.2, an Authenticated User can delete collections belonging to other users by directly sending a DELETE request to the collection endpoint. No ownership verification is performed before deleting collections. This vulnerability is fixed in 4.4.1 and 4.4.1-beta.2.

References

rommapp/romm security advisory · Vendor Advisory

More vulnerabilities in romm

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free