high7.7
CVE-2025-58355
Soft Serve vulnerable to arbitrary file writing through SSH API
Impact
Attackers can create/override arbitrary files with uncontrolled data. For a PoC, spin up an instance of soft-serve as explained in the README, and execute the following command: ```sh ssh -p23231 localhost repo commit icecream -- --output=/tmp/pwned ``` It should have created a file in `/tmp/pwned`.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | github.com/charmbracelet/soft-serve | < 0.10.0 | 0.10.0 |