CVE-2025-56499

Summary

Incorrect access control in mihomo v1.19.11 allows authenticated attackers with low-level privileges to read arbitrary files with elevated privileges via obtaining the external control key from the config file.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

References

• https://github.com/MetaCubeX/mihomo/tree/v1.19.11
• https://github.com/Cherrling/CVE-2025-56499

• ←Previous
• Next→