PT-2025-39216

CVE-2025-59826

·

Published

2025-09-23

·

Updated

2025-10-08

Description by

CVSS 3.1
7.6
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
Name of the Vulnerable Software and Affected Versions Flag Forge versions prior to 2.2.0
Description Flag Forge is a Capture The Flag (CTF) platform. Non-admin users are able to create arbitrary challenges, which could lead to the introduction of malicious, incorrect, or misleading content.
Recommendations Update to version 2.2.0 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-862: Missing Authorization
Related identifiers
CVE-2025-59826
GHSA-Q7PG-QCHV-3PC5
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com