Incorrect access control in mihomo v1.19.11 allows authenticated attackers with low-level privileges to read arbitrary files with elevated privileges via obtaining the external control key from the c…
Medium CVSS 6.5
Summary
Incorrect access control in mihomo v1.19.11 allows authenticated attackers with low-level privileges to read arbitrary files with elevated privileges via obtaining the external control key from the config file.
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://github.com/Cherrling/CVE-2025-56499 Exploit
- https://github.com/MetaCubeX/mihomo/tree/v1.19.11 Product
Timeline
- nvd_ingest NVD