PatchTheCVErebuild vulnerabilities and fixes
Recent CVEs affecting rebuild, with upgrade or downgrade steps. 5 tracked.
rebuild has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 3. Most recent: 2025-08-25. Highest priority: CVE-2025-50900 (score 58/100).
- CVE-2025-50900 CRITICAL 9.8 UPGRADE An issue was discovered in getrebuild/rebuild 4.0.4
- CVE-2025-28056 CRITICAL 9.8 UPGRADE rebuild v3.9.0 through v3.9.3 has a SQL injection vulnerability in /admin/admin-cli/exec component.
- CVE-2024-46413 MEDIUM 5.1 UPGRADE Rebuild v3.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the type parameter in the co
- CVE-2024-12665 LOW 3.5 DOWNGRADE A vulnerability, which was classified as problematic, was found in ruifang-tech Rebuild 3.8.5
- CVE-2024-12664 LOW 3.5 DOWNGRADE A vulnerability, which was classified as problematic, has been found in ruifang-tech Rebuild 3.8.5
FAQ
How do I fix rebuild vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is rebuild being exploited right now?
None of the tracked rebuild CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which rebuild CVE should I patch first?
CVE-2025-50900 currently ranks highest (58/100): An issue was discovered in getrebuild/rebuild 4.0.4.