CVE-2025-62368

Taiga Authenticated Remote Code Execution

Taiga is an open source project management platform. In versions 6.8.3 and earlier, a remote code execution vulnerability exists in the Taiga API due to unsafe deserialization of untrusted data. This issue is fixed in version 6.9.0.

Affected

taigaio · taiga-back

CVSS v3.1 GITHUB

9.0 CRITICALCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

EPSS

1.55% chance of exploitation in the next 30 days, 75th percentile

Published

2025-10-28

Updated

2025-10-29

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/taiga_tribe_gig_unser…

References

• CVE Record
• NVD entry