CVE-2025-27610

Name of the Vulnerable Software and Affected Versions Rack versions prior to 2.2.13 Rack versions prior to 3.0.14 Rack versions prior to 3.1.12

Description The issue arises from the Rack::Static component not properly sanitizing user-supplied paths before serving files, allowing encoded path traversal sequences to be used for accessing files outside the designated static file directory. This can lead to exposure of files under the specified root: directory.

Recommendations For versions prior to 2.2.13, update to version 2.2.13 or later. For versions prior to 3.0.14, update to version 3.0.14 or later. For versions prior to 3.1.12, update to version 3.1.12 or later. As a temporary workaround, consider removing usage of Rack::Static, or ensure that root: points to a directory path which only contains files that should be accessed publicly.