Login Request a demo
Medium severity · published Nov 7, 2025
CVE-2025-48985
A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta
5.3
CVSS
0.3%
EPSS
No
On KEV
Description
A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta. This issue may have allowed users to bypass filetype whitelists when uploading files. All users are encouraged to upgrade. More details: https://vercel.com/changelog/cve-2025-48985-input-validation-bypass-on-ai-sdk
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 21% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
AI SDK · Vercel
5.0.51 through 5.0.51; 5.1.0-beta.8 through 5.1.0-beta.8 · source: vendor
AI
AI · Vercel
before 5.0.52; 5.1.0; 5.1.0; 5.1.0; 5.1.0; 5.1.0; +4 more · source: NVD
Affected product
AS
AI SDK
Vercel
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-48985
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-48985
Patch
https://github.com/vercel/ai/commit/930399bb9839a8baf3d349614106d78268775eed
Vendor Advisory
https://vercel.com/changelog/cve-2025-48985-input-validation-bypass-on-ai-sdk