High severity · published Jul 11, 2025
CVE-2025-53641
Postiz allows header mutation in middleware facilitates resulting in SSRF
8.2
CVSS
0.3%
EPSS
No
On KEV
Description
Postiz is an AI social media scheduling tool. From 1.45.1 to 1.62.3, the Postiz frontend application allows an attacker to inject arbitrary HTTP headers into the middleware pipeline. This flaw enables a server-side request forgery (SSRF) condition, which can be exploited to initiate unauthorized outbound requests from the server hosting the Postiz application. This vulnerability is fixed in 1.62.3.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 21% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PO
postiz-app · gitroomhq
>= 1.45.1, < 1.62.3 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-53641
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-53641
github.com
https://github.com/gitroomhq/postiz-app/commit/65eca0e2f22155b43c78724ca43617ee52e42753
github.com
https://github.com/gitroomhq/postiz-app/security/advisories/GHSA-48c8-25jq-m55f
More from postiz-app
9.9
CVE-2026-115933
Forged signed tokens let any registered user take over other users and organizations
9.9
CVE-2026-115931
Arbitrary file read and backend crash through unrestricted provider method calls
9.9
CVE-2026-48781
Postiz has cross-tenant SUPERADMIN takeover via Skool-provider JWT forgery
9.8
CVE-2026-19264
Unauthenticated arbitrary file read via /uploads path traversal (URL-encoded separators) leading to instance takeover
9.8
CVE-2026-42298
Postiz: Arbitrary Code Execution and Token Exfiltration in pr-docker-build.yml via untrusted Dockerfile.dev