CVE-2025-54071CWE-434

RomM's authenticated arbitrary file write vulnerability can lead to Remote Code Execution

Critical · published July 21, 2025

CVSS v4.0
9.4
EPSS
1%
Percentile
54.7
In the wild
Unconfirmed
What it is

RomM (ROM Manager) allows users to scan, enrich, browse and play their game collections with a clean and responsive interface. In versions 4.0.0-beta.3 and below, an authenticated arbitrary file write vulnerability exists in the /api/saves endpoint. This can lead to Remote Code Execution on the system. The vulnerability permits arbitrary file write operations, allowing attackers to create or modify files at any filesystem location with user-supplied content. A user with viewer role or Scope.ASSETS_WRITE permission or above is required to pass authentication checks. The vulnerability is fixed in version 4.0.0-beta.4.

The record
Technical detail
CVSS v4.0
9.4 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00758 · 54.7th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2025-07-21T20:09Z
EPSS history
Timeline
  • 21 JUL 20:09Z
    RomM's authenticated arbitrary file write vulnerability can lead to Remote Code Execution
    cvelistv5