HIGH 7.7 Go
Soft Serve vulnerable to arbitrary file writing through SSH API
GHSA-33pr-m977-5w97 · CVE-2025-58355 · GO-2025-3930
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
Attackers can create/override arbitrary files with uncontrolled data.
For a PoC, spin up an instance of soft-serve as explained in the README, and execute the following command:
ssh -p23231 localhost repo commit icecream -- --output=/tmp/pwned
It should have created a file in /tmp/pwned.
Ready to move
Start Securing
Free, no credit card | First findings in minutes