CVE-2025-7107

CVE-2025-7107 affects SimStudioAI sim ≤ 0.1.17. The vulnerability lies in the function handleLocalFile within apps/sim/app/api/files/parse/route.ts, where manipulating the argument filePath enables path traversal. This can be triggered remotely, and exploitation has been publicly disclosed. The p...