Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-58753

25
FAUCET Score

CVE-2025-58753 describes a missing permission-check vulnerability in Copyparty versions prior to 1.19.8. This flaw allowed unauthorized access to sibling files within a shared folder, even if only a single file was explicitly shared. Rated 7.5 HIGH on the CVSS scale, this vulnerability is easily exploitable over the network with low attack complexity, potentially leading to unauthorized information disclosure. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
< 1.19.8CPE matchmatch criteria
cpe:2.3:a:9001:copyparty:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 4.0

5.3MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
LOW
User Interaction
NONE
VS Confidentiality
LOW
VS Integrity
NONE
VS Availability
NONE
SS Confidentiality
NONE
SS Integrity
NONE
SS Availability
NONE
Exploit Maturity
NOT_DEFINED
CvssVersion
4.0

Exploit Intelligence

EPSS Score
0.34%
Probability of exploitation in next 30 days
EPSS Percentile
26.9%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0034 is in the 8th percentile among its peer group of 51,551 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

github_advisorypatch availablevia nvd_reference
View patch
pippatch availablevia ghsa
Product: copypartyFixed in: 1.19.8

Vendor Advisories (1)

pipGHSA-pxvw-4w88-6x95medium

copyparty: Sharing a single file does not fully restrict access to other files in source folder

Sep 9, 2025

References

github.com / 9001/copyparty/commit/e0a92ba72d46074209a9c304eb2a01ca0429e60c
Patch
github.com / 9001/copyparty/releases/tag/v1.19.8
Release Notes
github.com / 9001/copyparty/security/advisories/GHSA-pxvw-4w88-6x95
Vendor Advisory