{"id":"CVE-2025-2954","state":"PUBLISHED","title":"mannaandpoem OpenManus File file_saver.py execute access control","description":"A vulnerability, which was classified as problematic, was found in mannaandpoem OpenManus up to 2025.3.13. This affects the function execute of the file app/tool/file_saver.py of the component File Handler. The manipulation leads to improper access controls. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","publishedAt":"2025-03-30T16:31:05.242Z","updatedAt":"2025-03-31T13:04:26.725Z","severity":{"score":4.8,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","source":"VulDB"},"assigner":"VulDB","products":["mannaandpoem OpenManus"],"affected":[{"vendor":"mannaandpoem","product":"OpenManus","versions":[{"version":"2025.3.0","status":"affected"},{"version":"2025.3.1","status":"affected"},{"version":"2025.3.2","status":"affected"},{"version":"2025.3.3","status":"affected"},{"version":"2025.3.4","status":"affected"},{"version":"2025.3.5","status":"affected"},{"version":"2025.3.6","status":"affected"},{"version":"2025.3.7","status":"affected"},{"version":"2025.3.8","status":"affected"},{"version":"2025.3.9","status":"affected"},{"version":"2025.3.10","status":"affected"},{"version":"2025.3.11","status":"affected"},{"version":"2025.3.12","status":"affected"},{"version":"2025.3.13","status":"affected"}],"modules":["File Handler"]}],"references":["https://vuldb.com/?id.302007","https://vuldb.com/?ctiid.302007","https://vuldb.com/?submit.521545","https://magnificent-dill-351.notion.site/Arbitrary-File-Writing-in-OpenManus-2025-3-13-1b9c693918ed805e8e7fd35a896d2d41"],"weaknesses":["CWE-284","CWE-266"],"ingestedAt":"2026-10-29T20:08:55.257Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/2xxx/CVE-2025-2954.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-2954","state":"PUBLISHED","datePublished":"2025-03-30T16:31:05.242Z","dateUpdated":"2025-03-31T13:04:26.725Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2025-03-29T19:39:01.052Z"},"containers":{"cna":{"title":"mannaandpoem OpenManus File file_saver.py execute access control","descriptions":[{"lang":"en","value":"A vulnerability, which was classified as problematic, was found in mannaandpoem OpenManus up to 2025.3.13. This affects the function execute of the file app/tool/file_saver.py of the component File Handler. The manipulation leads to improper access controls. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."},{"lang":"de","value":"Es wurde eine problematische Schwachstelle in mannaandpoem OpenManus bis 2025.3.13 gefunden. Es geht dabei um die Funktion execute der Datei app/tool/file_saver.py der Komponente File Handler. Mit der Manipulation mit unbekannten Daten kann eine improper access controls-Schwachstelle ausgenutzt werden. Der Angriff muss lokal erfolgen. Der Exploit steht zur öffentlichen Verfügung."}],"affected":[{"vendor":"mannaandpoem","product":"OpenManus","versions":[{"version":"2025.3.0","status":"affected"},{"version":"2025.3.1","status":"affected"},{"version":"2025.3.2","status":"affected"},{"version":"2025.3.3","status":"affected"},{"version":"2025.3.4","status":"affected"},{"version":"2025.3.5","status":"affected"},{"version":"2025.3.6","status":"affected"},{"version":"2025.3.7","status":"affected"},{"version":"2025.3.8","status":"affected"},{"version":"2025.3.9","status":"affected"},{"version":"2025.3.10","status":"affected"},{"version":"2025.3.11","status":"affected"},{"version":"2025.3.12","status":"affected"},{"version":"2025.3.13","status":"affected"}],"modules":["File Handler"]}],"references":[{"url":"https://vuldb.com/?id.302007","name":"VDB-302007 | mannaandpoem OpenManus File file_saver.py execute access control","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/?ctiid.302007","name":"VDB-302007 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/?submit.521545","name":"Submit #521545 | OpenManus 2025.3.13 Arbitrary File Writing","tags":["third-party-advisory"]},{"url":"https://magnificent-dill-351.notion.site/Arbitrary-File-Writing-in-OpenManus-2025-3-13-1b9c693918ed805e8e7fd35a896d2d41","tags":["exploit"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":4.8,"vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":3.3,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseSeverity":"LOW"}},{"cvssV3_0":{"version":"3.0","baseScore":3.3,"vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseSeverity":"LOW"}},{"cvssV2_0":{"version":"2.0","baseScore":1.7,"vectorString":"AV:L/AC:L/Au:S/C:N/I:P/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-284","type":"CWE","lang":"en","description":"Improper Access Controls"}]},{"descriptions":[{"cweId":"CWE-266","type":"CWE","lang":"en","description":"Incorrect Privilege Assignment"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2025-03-30T16:31:05.242Z"},"timeline":[{"time":"2025-03-29T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2025-03-29T01:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2025-03-29T20:44:18.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"s0l42 (VulDB User)","type":"reporter"}]},"adp":[{"title":"CISA ADP Vulnrichment","references":[{"url":"https://magnificent-dill-351.notion.site/Arbitrary-File-Writing-in-OpenManus-2025-3-13-1b9c693918ed805e8e7fd35a896d2d41","tags":["exploit"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-03-31T13:04:20.884552Z","id":"CVE-2025-2954","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-03-31T13:04:26.725Z"}}]}}}