CVE-2025-61685

MediumCVSS 6.5

Published: 03/10/2025(UTC)Updated: 19/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.58%

47th percentile - higher than 47% of all known CVEs

Summary

Mastra, a TypeScript framework for building AI agents, versions 0.13.8 through 0.13.20-alpha.0, is vulnerable to a directory traversal that discloses directory listings. The path traversal check is bypassed by subsequent directory suggestion logic, allowing an attacker to list arbitrary directories on the user's filesystem, including the home directory. Fixed in version 0.13.20.

Risk Assessment

An attacker can learn the filesystem structure and expose sensitive directory information, including the user's home directory.

Recommendation

Update Mastra to version 0.13.20 or later.

Other vulnerabilities in Mastra

CVE-2026-82273Medium
Mastra through 1.63.0 contains an authentication bypass vulnerability in the memory API thread ownership validation when mapUserToResourceId callback is omitted from configuration. Authenticated attackers can enumerate all threads via GET /api/memory/threads and read conversation history and metadata of other resource owners.

Original NVD description (English source)

Mastra is a Typescript framework for building AI agents and assistants. Versions 0.13.8 through 0.13.20-alpha.0 are vulnerable to a Directory Traversal attack that results in the disclosure of directory listings. The code contains a security check to prevent path traversal for reading file contents, but this check is effectively bypassed by subsequent logic that attempts to find directory suggestions. An attacker can leverage this flaw to list the contents of arbitrary directories on the user's filesystem, including the user's home directory, exposing sensitive information about the file system's structure. This issue is fixed in version 0.13.20.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS