Is CVE-2025-48985 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-48985 being exploited in the wild.

How severe is CVE-2025-48985?

Low severity, with a CVSS score of 3.7, published 7 November 2025.

Which products and versions are affected?

Vercel AI SDK before 5.0.52, 5.1.0-beta.0 to before 5.1.0-beta.9, before 6.0.0-beta.

Is there a fix for CVE-2025-48985?

A patch was published on 2025-11-07: Fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2025-48985 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2025-48985?

Check whether you run Vercel AI SDK at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-48985: Vercel AI SDK filetype whitelist bypass in file upload

CVE-2025-48985 · Severity: low · CVSS 3.7 · Published 2025-11-07

Vercel's AI SDK contains a vulnerability in its file upload validation logic that allows users to bypass intended filetype restrictions. This could enable developers using the SDK to accept file types they intended to block, potentially leading to upload of malicious or unexpected file types in applications built with this SDK.

Technologies: Vercel AI SDK. Vendors: Vercel.

Quick answers

Is CVE-2025-48985 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-48985 being exploited in the wild.
How severe is CVE-2025-48985?: Low severity, with a CVSS score of 3.7, published 7 November 2025.
Which products and versions are affected?: Vercel AI SDK before 5.0.52, 5.1.0-beta.0 to before 5.1.0-beta.9, before 6.0.0-beta.
Is there a fix for CVE-2025-48985?: A patch was published on 2025-11-07: Fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2025-48985 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2025-48985?: Check whether you run Vercel AI SDK at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is an input validation bypass (CWE-20, CWE-682) in Vercel's AI SDK's file upload handling mechanism. The root cause lies in the download logic that filters out images with missing data, which inadvertently changes the index mapping between input and output images, allowing validation checks to be circumvented. The attack is network-accessible and requires no authentication or user interaction. An attacker can upload files that should have been blocked by the SDK's filetype whitelist. The issue has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta.

Affected products

Vercel AI SDK before 5.0.52, 5.1.0-beta.0 to before 5.1.0-beta.9, before 6.0.0-beta

Identifiers

CVE-2025-48985
GHSA-rwvc-j5jr-mgvh

Timeline

2025-11-07: disclosed: Vulnerability published as CVE-2025-48985 and GHSA-rwvc-j5jr-mgvh
2025-11-07: patched: Fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta

References

https://github.com/vercel/ai/issues/8881

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.