Skip to content
NewA calmer, faster ZeroHour

Two Critical Flaws Uncovered in Wondershare RepairIt Exposing User Data and AI Models

The Hacker Newsby @TheHackersNews ()5 min read3
Analyze CVE-2025-10643 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2025-10644
+1 related CVE
Wondershare Repairit SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability
9.4
group max
3%

From the original article

5 min read at thehackernews.com

Cybersecurity researchers have disclosed two security flaws in Wondershare RepairIt that exposed private user data and potentially exposed the system to artificial intelligence (AI) model tampering and supply chain risks. The critical-rated vulnerabilities in question, discovered by Trend Micro, are listed below - CVE-2025-10643 (CVSS score: 9.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.