CVE-2025-62378 | underctrl-io commandkit up to 1.2.0-rc.11 commandName name resolution (GHSA-fhwm-pc6r-4h2f)

October 15, 2025 Yanac

A vulnerability was found in underctrl-io commandkit up to 1.2.0-rc.11. It has been declared as problematic. Affected is an unknown function. Such manipulation of the argument commandName leads to incorrectly-resolved name.

This vulnerability is uniquely identified as CVE-2025-62378. Local access is required to approach this attack. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More