CVE-2025-4779 Stored Cross-site Scripting (XSS) in lunary-ai/lunary

Critical 9.1 Published 7 Jul 2025 Updated 7 Jul 2025

An unauthenticated attacker can inject malicious JavaScript via the ingest endpoint, leading to arbitrary code execution in the victim's browser.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2025-4779?

CVE-2025-4779 is a critical cross-site scripting vulnerability in Lunary Lunary, published on 7 Jul 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

lunary-ai/lunary versions prior to 1.9.24 are vulnerable to stored cross-site scripting (XSS). An unauthenticated attacker can inject malicious JavaScript into the `v1/runs/ingest` endpoint by adding an empty `citations` field, triggering a code path where `dangerouslySetInnerHTML` is used to render attacker-controlled text. This vulnerability allows the execution of arbitrary JavaScript in the context of the user's browser, potentially leading to session hijacking, data theft, or other malicious actions.

Weakness: CWE-79

Which versions are affected by CVE-2025-4779?

It affects 1 product.

Products include Lunary Lunary.

How do I fix CVE-2025-4779?

No fix has been published for CVE-2025-4779 yet. Limit exposure of the affected software until one is available.

Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.

Is CVE-2025-4779 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-4779 exists.

All Lunary Lunary vulnerabilities

Sources

Also known as GHSA-gh38-h668-j7v8.