AIVercel8 months ago
CVE-2025-48985: Input Validation Bypass on AI SDK
2 min read
A low-severity vulnerability in Vercel's AI SDK allowed attackers to bypass filetype whitelists during file uploads. The issue stemmed from improper URL-to-data mapping in the prompt conversion pipeline. Fixes are available in versions 5.0.52 and 6.0.0-beta. Vercel customers should upgrade immediately.
Level
Hype check
Tap to vote and see what everyone thinks.
