Server-Side Template Injection in Mintlify Platform
CVE-2025-67843

8.3HIGH

Key Information:

Vendor

Mintlify

Status
Mintlify Platform
Vendor
CVE Published:
19 December 2025

What is CVE-2025-67843?

The Mintlify Platform is affected by a Server-Side Template Injection vulnerability that allows remote attackers to execute arbitrary code. This occurs due to improper handling of inline JSX expressions in MDX files, which could be exploited to manipulate server-side processing. It is crucial for users to ensure they are running the latest version of the platform, as updates beyond November 15, 2025, address this vulnerability to enhance security.

Affected Version(s)

Mintlify Platform 0 < 2025-11-15

References

https://www.mintlify.com/docs/changelog
https://www.mintlify.com/blog/working-with-security-resea...
https://kibty.town/blog/mintlify/

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-67843 : Server-Side Template Injection in Mintlify Platform