CVE-2025-68049

MediumCVSS 6.3

Published: 15/06/2026(UTC)Updated: 15/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

15th percentile — higher than 15% of all known CVEs

Versions of bunny.net up to 2.3.6 contain a vulnerability in access control that may allow subscribers unauthorized access to resources.

Organizations may be exposed to unauthorized access to data, potentially leading to information leaks or breaches of user privacy.

It is recommended to upgrade to the latest version of bunny.net to mitigate this access control vulnerability.

Original NVD description (English source)

Subscriber Broken Access Control in bunny.net <= 2.3.6 versions.