1. Home
  2. CVE Database
  3. CVE-2025-66410
CRITICAL · 9.1

CVE-2025-66410

Gin-vue-admin is a backstage management system based on vue and gin. In 2.8.6 and earlier, attackers can delete any file on the server at will, causing damage or unavailability of server resources. At...

Vulnerability Description

Gin-vue-admin is a backstage management system based on vue and gin. In 2.8.6 and earlier, attackers can delete any file on the server at will, causing damage or unavailability of server resources. Attackers can control the 'FileMd5' parameter to delete any file and folder.

CVSS Score

9.1

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
Gin-Vue-Admin ProjectGin-Vue-Admin<= 2.8.6

Related Weaknesses (CWE)

CWE-22

References

FAQ

What is CVE-2025-66410?

CVE-2025-66410 is a vulnerability with a CVSS score of 9.1 (CRITICAL). Gin-vue-admin is a backstage management system based on vue and gin. In 2.8.6 and earlier, attackers can delete any file on the server at will, causing damage or unavailability of server resources. At...

How severe is CVE-2025-66410?

CVE-2025-66410 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2025-66410?

Check the references section above for vendor advisories and patch information. Affected products include: Gin-Vue-Admin Project Gin-Vue-Admin.