CVE-2025-66698

CVE-2025-66698 is a high-severity authentication bypass vulnerability affecting Semantic machines v5.4.8, specifically the 'veda' product. Attackers can exploit this by sending crafted HTTP requests to various API endpoints, gaining unauthorized access without requiring any user interaction. With a CVSS score of 8.6 (HIGH), this network-exploitable flaw has a critical impact on confidentiality, though integrity and availability are not directly affected. While there is no evidence of active exploitation, public exploit code, or KEV listing, the vulnerability has garnered significant community discussion, indicating potential future interest from threat actors.