Vulnerability · Published Jul 16, 2025 · Assigned by GitHub_M

CVE-2025-53908RomM vulnerable to Authenticated Path Traversal

High 8.3

In plain English

A high-severity security flaw in romm from rommapp. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 46% of all known vulnerabilities).

Severity (CVSS 4.0)8.3High

Exploit odds (30 days)0.5%top 54.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

RomM is a self-hosted rom manager and player. Versions prior to 3.10.3 and 4.0.0-beta.3 have an authenticated path traversal vulnerability in the `/api/raw` endpoint. Anyone running the latest version of RomM and has multiple users, even unprivileged users, such as the kiosk user in the official implementation, may be affected. This allows the leakage of passwords and users that may be stored on the system. Versions 3.10.3 and 4.0.0-beta.3 contain a patch.

Affected products (as reported)

Vendor	Product	Versions
rommapp	romm	< 3.10.3< 4.0.0-beta.3

Weakness: CWE-26 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

References

https://github.com/rommapp/romm/security/advisories/GHSA-fx9g-xw4j-jwc3 x_refsource_CONFIRM
https://github.com/rommapp/romm/commit/7c94cb05e74ddb6a6af7b82320686c01754e9966 x_refsource_MISC
https://github.com/rommapp/romm/commit/baa1a9759079c36e36a9f10c920c46b57d0b6151 x_refsource_MISC
https://github.com/rommapp/romm/blob/4.0.0-beta.2/backend/endpoints/raw.py#L31 x_refsource_MISC