AIKIDO-2025-10006

nicegui is vulnerable to Improper Authentication

75

High

nicegui python

AIKIDO-2025-10006: nicegui is vulnerable to Improper Authentication in versions 1.3.0 - 2.9.0.

Improper Authentication
Vuln in 1.3.0 - 2.9.0
Fixed in 2.9.1
CVE-2025-21618
TL;DR

Who does this affect?

How can it be fixed?

Background info

Link to vendor website

Logo
ยฉ 2024 Aikido Security BV | BE0792914919
๐Ÿ‡ช๐Ÿ‡บ Registered address: Coupure Rechts 88, 9000, Ghent, Belgium
๐Ÿ‡ช๐Ÿ‡บ Office address: Gebroeders van Eyckstraat 2, 9000, Ghent, Belgium
๐Ÿ‡บ๐Ÿ‡ธ Office address: 95 Third St, 2nd Fl, San Francisco, CA 94103, US
Any use of the intel.aikido.dev website and content is explicitly subject to Aikido Terms of Use