CVE-2025-65792

DataGear v5.5.0 is vulnerable to Arbitrary File Deletion

Critical · published December 10, 2025

CVSS v3.1
9.1
EPSS
1%
Percentile
42.4
In the wild
Unconfirmed
What it is

🚨 A single vulnerability in DataGear v5.5.0 allows users to delete any file they want – yes, ANY file – with just a simple request! 🔥 Think of it like a restaurant where a waiter can toss any dish out of the kitchen just by saying the magic words, regardless of what it is – from a customer's meal to the chef's secret recipe. This could lead to catastrophic data loss, allowing anyone with access to delete crucial files, disrupting services, and potentially crippling business operations. Imagine waking up to find all your important documents vanished overnight because someone found the secret sauce!

Put simply

Think of it like a restaurant where a waiter can toss any dish out of the kitchen just by saying the magic words, regardless of what it is – from a customer's meal to the chef's secret recipe. This Arbitrary File Deletion vulnerability allows an attacker to send crafted requests that the server processes without proper validation, leading to unauthorized file deletions in the system.

What to do

This could lead to catastrophic data loss, allowing anyone with access to delete crucial files, disrupting services, and potentially crippling business operations. Imagine waking up to find all your important documents vanished overnight because someone found the secret sauce! Update DataGear to version 5.5.1 immediately to patch this critical vulnerability. Monitor file permissions and access controls closely to prevent unauthorized file operations. Regularly review your security protocols to ensure they are robust against such threats. You've got this! With a quick update and vigilant monitoring, your system will be safe and sound in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00507 · 42.4th percentile
Published
2025-12-10T00:00Z
EPSS history
Timeline
  • 10 DEC 00:00Z
    DataGear v5.5.0 is vulnerable to Arbitrary File Deletion
    cvelistv5