Skip to content
OpenAdvisories

Vendor

SimStudioAI

12 known vulnerabilities.

Products

sim 12
All Critical High Medium Low Exploited only

7 results · Clear filters · Feed

  • Medium 5.0
    CVE-2026-86115

    Sim before 0.8.14 Confused Deputy in Tool URL Routing Mints an Internal Token for a User-Supplied /api/ Path

    Sim before 0.8.14 classifies tool requests as internal based on URL prefix matching without scheme normalization, skipping SSRF validation and minting internal authentication tokens. Authenticated workflow authors can bypass external URL validation by supplyi…

    SimStudioAI sim
  • Medium 6.3
    CVE-2025-10097

    SimStudioAI sim route.ts code injection

    A vulnerability was identified in SimStudioAI sim up to 1.0.0. This impacts an unknown function of the file apps/sim/app/api/function/execute/route.ts. The manipulation of the argument code leads to code injection. The attack is possible to be carried out rem…

    SimStudioAI sim simstudio npm
  • Medium 6.3
    CVE-2025-10096

    SimStudioAI sim route.ts server-side request forgery

    A vulnerability was determined in SimStudioAI sim up to 1.0.0. This affects an unknown function of the file apps/sim/app/api/files/parse/route.ts. Executing manipulation of the argument filePath can lead to server-side request forgery. The attack can be execu…

    SimStudioAI sim
  • Medium 6.3
    CVE-2025-9805

    SimStudioAI sim route.ts server-side request forgery

    A vulnerability was found in SimStudioAI sim up to 51b1e97fa22c48d144aef75f8ca31a74ad2cfed2. This issue affects some unknown processing of the file apps/sim/app/api/proxy/image/route.ts. The manipulation results in server-side request forgery. The attack may …

    SimStudioAI sim
  • Medium 5.4
    CVE-2025-9801

    SimStudioAI sim path traversal

    A security vulnerability has been detected in SimStudioAI sim up to ed9b9ad83f1a7c61f4392787fb51837d34eeb0af. This affects an unknown part. The manipulation of the argument filePath leads to path traversal. Remote exploitation of the attack is possible. The e…

    SimStudioAI sim
  • Medium 6.3
    CVE-2025-9800

    SimStudioAI sim HTML File route.ts import unrestricted upload

    A weakness has been identified in SimStudioAI sim up to ed9b9ad83f1a7c61f4392787fb51837d34eeb0af. Affected by this issue is the function Import of the file apps/sim/app/api/files/upload/route.ts of the component HTML File Parser. Executing manipulation of the…

    SimStudioAI sim
  • Medium 5.3
    CVE-2025-7107

    SimStudioAI sim route.ts handleLocalFile path traversal

    A vulnerability classified as critical has been found in SimStudioAI sim up to 0.1.17. Affected is the function handleLocalFile of the file apps/sim/app/api/files/parse/route.ts. The manipulation of the argument filePath leads to path traversal. It is possibl…

    SimStudioAI sim