CVE-2025-10854 | neuml txtai up to 9.0.0 TAR File symlink

A vulnerability described as critical has been identified in neuml txtai up to 9.0.0. This vulnerability affects unknown code of the component TAR File Handler. The manipulation results in symlink following.

This vulnerability was named CVE-2025-10854. The attack may be performed from remote. There is no available exploit.

A patch should be applied to remediate this issue.VulDB Recent EntriesRead More