CVE-2025-48985
- CVSS
- —
- EPSS
- 0.003 (16.3th percentile)
- CISA KEV
- Not listed
- Exploitation
- No report
- Public exploits
- None seen
- State
- Unknown
Coverage
Vercel (blog + changelog)
CVE-2025-48985: Input Validation Bypass on AI SDK
security vulnerability A low-severityin Vercel's AI SDK was responsibly disclosed, and has been fixed for 5.0.52, 6.0.0-beta.* The issue may have allowed users to bypass filetype whitelists when uploading files. Vercel customers are encouraged to upgrade to the latest version. Read more details…
What we observed
No signals recorded