CVE-2025-58751

CVE-2025-58751 describes a path traversal vulnerability in Vite, a JavaScript frontend tooling framework, affecting versions prior to 7.1.5, 7.0.7, 6.3.6, and 5.4.20. This flaw allows files within the public directory to be served, bypassing server.fs settings, specifically impacting applications that expose the Vite dev server to the network and utilize symlinks in the public directory. Rated 5.3 MEDIUM (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N), the vulnerability presents a low risk of information disclosure. There is currently no evidence of active exploitation, no Metasploit modules or ExploitDB entries, though a Nuclei template for path traversal exists, and community discussion is minimal.