CVE-2025-48985 Vercel’s AI SDK's filetype whitelists can be bypassed when uploading files
Attackers can bypass filetype whitelists during file uploads in the Vercel AI SDK, potentially allowing malicious file execution.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-48985?
CVE-2025-48985 is a low-severity vulnerability in Vercel AI SDK, published on 7 Nov 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta. This issue may have allowed users to bypass filetype whitelists when uploading files. All users are encouraged to upgrade. More details: https://vercel.com/changelog/cve-2025-48985-input-validation-bypass-on-ai-sdk
Weakness: CWE-20
Which versions are affected by CVE-2025-48985?
4 open source packages ship an affected version, including ai. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
ai npm | All versions | 5.0.52 |
ai npm | All versions | 5.0.52 |
ai npm | From 5.1.0-beta.0 | 5.1.0-beta.9 |
ai npm | From 5.1.0-beta.0 | 5.1.0-beta.9 |
Products include Vercel Ai.
How do I fix CVE-2025-48985?
Upgrade ai to a fixed version for your release line: 5.0.52 or 5.1.0-beta.9.
Is CVE-2025-48985 being exploited?
There is no known exploitation of CVE-2025-48985 in the wild and no public exploit code.
Other vulnerabilities in Vercel AI SDK
- CVE-2026-8768 vercel ai provider-utils download-blob.ts validateDownloadUrl server-side request forgery
- CVE-2026-8769 vercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumption
- CVE-2026-8767 vercel ai PR Branch Name Interpolation prettier-on-automerge.yml run os command injection
Sources
Also known as ECHO-9790-2fa3-84e4, GHSA-rwvc-j5jr-mgvh, MINI-2f7x-49qg-3j3j, MINI-3gx6-g372-w7fr, MINI-7hx3-hxfm-3jg5, MINI-f35c-w682-rr9c and 4 more.