CVE-2025-66402: misskey 13.0.0

Affected technology

misskey · from 13.1.0 (inclusive), before 2025.12.0 (exclusive)
misskey

misskey · 13.0.0
misskey

misskey · 13.0.0 · update beta16
misskey

misskey · 13.0.0 · update beta21
misskey

misskey · 13.0.0 · update beta22
misskey

misskey · 13.0.0 · update beta23
misskey

misskey · 13.0.0 · update beta24
misskey

misskey · 13.0.0 · update beta25
misskey

misskey · 13.0.0 · update beta26
misskey

misskey · 13.0.0 · update beta27
misskey

misskey · 13.0.0 · update beta28
misskey

misskey · 13.0.0 · update beta29
misskey

misskey · 13.0.0 · update beta30
misskey

misskey · 13.0.0 · update beta31
misskey

misskey · 13.0.0 · update beta32
misskey

misskey · 13.0.0 · update beta33
misskey

misskey · 13.0.0 · update beta34
misskey

misskey · 13.0.0 · update beta35
misskey

misskey · 13.0.0 · update beta36
misskey

misskey · 13.0.0 · update beta37
misskey

misskey · 13.0.0 · update beta38
misskey

misskey · 13.0.0 · update beta39
misskey

misskey · 13.0.0 · update beta40
misskey

misskey · 13.0.0 · update beta41
misskey

misskey · 13.0.0 · update beta42
misskey

misskey · 13.0.0 · update beta43
misskey

misskey · 13.0.0 · update rc1
misskey

misskey · 13.0.0 · update rc10
misskey

misskey · 13.0.0 · update rc11
misskey

misskey · 13.0.0 · update rc2
misskey

misskey · 13.0.0 · update rc3
misskey

misskey · 13.0.0 · update rc4
misskey

misskey · 13.0.0 · update rc5
misskey

misskey · 13.0.0 · update rc6
misskey

misskey · 13.0.0 · update rc7
misskey

misskey · 13.0.0 · update rc8
misskey

misskey · 13.0.0 · update rc9
misskey

misskey · >= 13.0.0-beta.16, < 2025.12.0
misskey-dev

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

Vendor/CNA’s CVSS 4.0 assessment (base score 7.1/10) rates confidentiality impact as high; integrity and availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.