CNNVD-202509-2023 Information

CNNVD ID

CNNVD-202509-2023

CVE-2025-49089

  • CNNVD Published: 2025-09-15

Description (Chinese)

MoneyPrinterTurbo是Harry个人开发者的一个利用AI大模型生成高清短视频的软件。 MoneyPrinterTurbo 1.2.6版本存在安全漏洞,该漏洞源于/api/v1/download/ URI存在路径遍历问题,可能导致访问敏感文件。

Description (English)

MoneyPrinturbo is a software for Harry’s personal developer to generate high-resolution short videos using a large AI model. MoneyPrinturbo 1.2.6 has a security loophole that stems from /api/v1/download/URI ’ s routing problems, which may lead to access to sensitive documents.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

个人开发者

Published

2025-09-15

Last Modified

2026-02-24

References

https://gist.github.com/Theresasu1/3a9ced1f3d8208cc9f99ce34057cf681 https://www.wangxutech.com https://github.com/harry0703/MoneyPrinterTurbo https://moneyprinterturbo.net https://access.redhat.com/security/cve/cve-2025-49089

Share on: