CVE-2025-45242

HighCVSS 7.7

Published: 05/05/2025(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

22th percentile - higher than 22% of all known CVEs

Summary

Rhymix v2.1.22 was discovered to contain an arbitrary file deletion vulnerability via the procFileAdminEditImage method in /file/file.admin.controller.php.

Risk Assessment

An attacker can delete critical system or configuration files, potentially leading to application downtime or complete data loss.

Recommendation

Immediately update Rhymix to the latest available version that includes a fix for this vulnerability.

Other vulnerabilities in Rhymix

CVE-2026-36453High
Rhymix before 2.1.31 allows insecure direct object reference, aka RVE-2026-1. Arbitrary files can be accessed via extra variables.

Original NVD description (English source)

Rhymix v2.1.22 was discovered to contain an arbitrary file deletion vulnerability via the procFileAdminEditImage method in /file/file.admin.controller.php.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS