CVE-2025-11233

CVE-2025-11233 is a medium-severity path traversal vulnerability affecting Rust versions 1.87.0 to 1.88.0 when compiled for the tier 3 Cygwin target (x86_64-pc-cygwin). The standard library's Path API on this specific target incorrectly handled backslash path separators, potentially leading to path traversal attacks or malicious filesystem operations in applications that validate paths. This vulnerability primarily impacts users who manually compiled the Cygwin target, as pre-built binaries are not distributed. The CVSS score of 6.3 (Medium) indicates a network-exploitable vulnerability with low attack complexity, potentially leading to low impacts on confidentiality, integrity, and availability. However, its practical impact is limited due to the niche compilation target. There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage are minimal, suggesting low public attention.