CVE-2025-3930 | Strapi up to 5.24.0 renew-token endpoint session expiration

October 16, 2025 Yanac

A vulnerability described as problematic has been identified in Strapi up to 5.24.0. This impacts an unknown function of the file /admin/renew-token endpoint. The manipulation results in session expiration.

This vulnerability was named CVE-2025-3930. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More