SSimStudioAI

Products

Exploited and recent CVEs

• CVE-2026-86115 Medium 5.0 Sim before 0.8.14 Confused Deputy in Tool URL Routing Mints an Internal Token for a User-Supplied /api/ Path 0.5%
• CVE-2026-13510 Low 3.7 SimStudioAI sim Password Protection deployment.ts weak hash 0.3%
• CVE-2026-3432 Critical 9.3 Sim Studio AI - Unauthenticated OAuth Token Theft 0.3%
• CVE-2026-3431 Critical 9.8 Sim Studio AI - MongoDB SSRF and Arbitrary Document Deletion 0.4%
• CVE-2025-15099 High 7.3 simstudioai sim CRON Secret internal.ts improper authentication 0.8%
• CVE-2025-10097 Medium 6.3 SimStudioAI sim route.ts code injection 0.8%
• CVE-2025-10096 Medium 6.3 SimStudioAI sim route.ts server-side request forgery 0.3%
• CVE-2025-9805 Medium 6.3 SimStudioAI sim route.ts server-side request forgery 0.3%
• CVE-2025-9801 Medium 5.4 SimStudioAI sim path traversal 0.8%
• CVE-2025-9800 Medium 6.3 SimStudioAI sim HTML File route.ts import unrestricted upload 0.3%
• CVE-2025-7114 High 7.3 SimStudioAI sim Session route.ts POST missing authentication 0.6%
• CVE-2025-7107 Medium 5.3 SimStudioAI sim route.ts handleLocalFile path traversal 0.9%