CVE Intelligence

Metacubex vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Metacubex products: 1 record(s), with severity, exploitation and fixes.

Mihomo 1

Exploited only (KEV) →

CVE-2025-56499 Medium · 6.5 CWE-284 Nov 18, 2025
Improper Access Control in Metacubex Mihomo
Incorrect access control in mihomo v1.19.11 allows authenticated attackers with low-level privileges to read arbitrary files with elevated privileges via obtaining the external control key from the config file.