CVE-2025-6283

Low

Description

A vulnerability was found in xataio Xata Agent up to 0.3.0. It has been classified as problematic. This affects the function GET of the file apps/dbagent/src/app/api/evals/route.ts. The manipulation of the argument passed leads to path traversal. Upgrading to version 0.3.1 is able to address this issue. The patch is named 03f27055e0cf5d4fa7e874d34ce8c74c7b9086cc. It is recommended to upgrade the affected component.

SeverityLow

CVSS3.5

Exploit probability—

ProductXata Agent

PublishedJun 19, 2025

First seenJun 19, 2025

Weakness typeCWE-22Path traversal

How to fix

Update

xata agent0.3.1 or later

Patches

github.com/xataio/agent/commit/03f27055e0cf5d4fa7e874d34ce8c74c7b9086cc
github.com/xataio/agent/releases/tag/v0.3.1

Affected products

Product	Affected versions	Fixed in
xata agent	v < 0.3.1	0.3.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.