CVE-2025-25205

Name of the Vulnerable Software and Affected Versions Audiobookshelf versions 2.17.0 through 2.19.0

Description A flaw in the authentication bypass logic allows unauthenticated requests to match certain unanchored regex patterns in the URL. Attackers can craft URLs containing substrings such as "/api/items/1/cover" within the r query parameter to partially bypass authentication or trigger server crashes on specific routes. This may result in the disclosure of protected information or a complete denial of service if the downstream code expects an authenticated user object.

Recommendations Update to version 2.19.1.