CVE-2025-55149 Overview
CVE-2025-55149 is a path traversal vulnerability [CWE-22] in Tiny-Scientist, a lightweight framework for automating scientific research workflows. The flaw resides in the review_paper function within backend/app.py. Versions 0.1.1 and below fail to validate user-supplied file paths, allowing attackers to bypass directory restrictions. Remote unauthenticated attackers can read arbitrary PDF files accessible to the server process. The maintainers have not released a fix at the time of publication.
Critical Impact
Unauthenticated network attackers can read arbitrary PDF files on the host, enabling document theft and file system reconnaissance. No patched version is currently available.
Affected Products
- Tiny-Scientist framework versions 0.1.1 and below
- backend/app.py component containing the review_paper function
- Deployments exposing the Tiny-Scientist backend over a network
Discovery Timeline
- 2025-08-09 - CVE-2025-55149 published to NVD
- 2026-06-17 - Last updated in NVD database
Technical Details for CVE-2025-55149
Vulnerability Analysis
The review_paper endpoint accepts a file path parameter used to load a PDF for review. The handler passes this input directly to file read operations without canonicalization or allowlist checks. Attackers can supply traversal sequences such as ../ to escape the intended document directory. The server process then returns the contents of any PDF it can access on the host file system.
The scope is limited to PDF files that the service account can read. However, this still exposes sensitive documents stored outside the application's working directory. Attackers can also enumerate the file system structure by probing common paths and observing response behavior.
Root Cause
The root cause is missing input validation on the file path parameter in review_paper. The function does not resolve the absolute path, does not verify containment within an approved base directory, and does not filter traversal metacharacters. This falls under CWE-22, Improper Limitation of a Pathname to a Restricted Directory.
Attack Vector
Exploitation requires only network access to the Tiny-Scientist backend. No authentication or user interaction is needed. An attacker sends a crafted request to the review_paper endpoint containing a relative or absolute path pointing outside the intended PDF directory. The server responds with the file contents. See the GitHub Security Advisory GHSA-rrgf-hcr9-jq6h for additional technical context.
Detection Methods for CVE-2025-55149
Indicators of Compromise
- HTTP requests to the review_paper endpoint containing ../, ..\, or URL-encoded traversal sequences such as %2e%2e%2f
- Requests referencing absolute file paths outside the configured PDF directory
- Access log entries showing PDF read operations against unusual file system locations
- Unexpected outbound transfers of PDF content originating from the Tiny-Scientist process
Detection Strategies
- Inspect web server and application logs for path traversal patterns in parameters passed to review_paper
- Alert on file access by the Tiny-Scientist service account outside its designated document directory
- Deploy a web application firewall rule that blocks traversal metacharacters in request parameters targeting the backend
Monitoring Recommendations
- Enable verbose request logging on the Tiny-Scientist backend and forward logs to a central SIEM
- Baseline normal file read paths for the service account and alert on deviations
- Monitor process-level file access using host-based telemetry for reads outside the application root
How to Mitigate CVE-2025-55149
Immediate Actions Required
- Restrict network exposure of the Tiny-Scientist backend to trusted internal networks or authenticated users only
- Run the Tiny-Scientist process under a least-privilege account that can read only the intended PDF directory
- Deploy a reverse proxy or WAF rule blocking traversal sequences in requests to the review_paper endpoint
- Audit file access logs for prior exploitation attempts against the affected function
Patch Information
No official patch is available at the time of publication. The GitHub Security Advisory GHSA-rrgf-hcr9-jq6h confirms that a fix has not been released for versions 0.1.1 and below. Monitor the upstream repository for updates and apply patches when available.
Workarounds
- Place the Tiny-Scientist backend behind an authenticating reverse proxy until a patch is released
- Use filesystem-level controls such as chroot, containers with read-only mounts, or mandatory access control to confine the service to a dedicated PDF directory
- Apply an application-layer filter that canonicalizes and validates file path parameters against an allowlist before they reach review_paper
- Consider temporarily disabling the review_paper endpoint if it is not required for operations
Disclaimer: This content was generated using AI. While we strive for accuracy, please verify critical information with official sources.
