{"id":"CVE-2025-65854","title":"Insecure permissions in the scheduled tasks feature of MineAdmin v3.x allows attackers to execute arbitrary commands and execute a full account takeover.","summary":"Insecure permissions in the scheduled tasks feature of MineAdmin v3.x allows attackers to execute arbitrary commands and execute a full account takeover.","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-94"],"vendor":"mineadmin","product":"mineadmin","affected":["mineadmin < 3.0"],"patched":["mineadmin 3.0"],"published":"2025-12-12","updated":"2026-10-14","sourceUpdated":"2026-10-14T17:10:00.210","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-65854","references":[{"url":"https://gist.github.com/SourByte05/1a6c6b08ac47c5d58eb7dd4422cc23b7","label":"cve@mitre.org"},{"url":"https://www.mineadmin.com/","label":"cve@mitre.org"}],"tags":["nvd"],"epss":0.00496,"epssPercentile":0.4103,"ingestedAt":"2026-10-14T17:44:53.605Z","slug":"CVE-2025-65854","body":"## Overview\n\nInsecure permissions in the scheduled tasks feature of MineAdmin v3.x allows attackers to execute arbitrary commands and execute a full account takeover.\n\n## Affected\n\n- `mineadmin < 3.0`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `mineadmin 3.0`","depth":"midnight","depthScore":54,"depthScoreParts":{"impact":53.9,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}