PatchTheCVEsim vulnerabilities and fixes
Recent CVEs affecting sim, with upgrade or downgrade steps. 9 tracked.
sim has 9 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 8. Most recent: 2026-03-02. Highest priority: CVE-2025-15099 (score 50/100).
- CVE-2025-15099 HIGH 7.3 UPGRADE A vulnerability was identified in simstudioai sim up to 0.5.27
- CVE-2025-9800 MEDIUM 6.3 UPGRADE A weakness has been identified in SimStudioAI sim up to ed9b9ad83f1a7c61f4392787fb51837d34eeb0af
- CVE-2025-10097 MEDIUM 6.3 DOWNGRADE A vulnerability was identified in SimStudioAI sim up to 1.0.0
- CVE-2026-3432 CRITICAL 9.1 UPGRADE On SimStudio version below to 0.5.74, the `/api/auth/oauth/token` endpoint contains a code path that bypasses
- CVE-2026-3431 CRITICAL 9.8 UPGRADE On SimStudio version below to 0.5.74, the MongoDB tool endpoints accept arbitrary connection parameters from t
- CVE-2025-9801 MEDIUM 5.4 UPGRADE A security vulnerability has been detected in SimStudioAI sim up to ed9b9ad83f1a7c61f4392787fb51837d34eeb0af
- CVE-2025-7114 HIGH 7.3 UPGRADE A vulnerability was found in SimStudioAI sim up to 37786d371e17d35e0764e1b5cd519d873d90d97b
- CVE-2025-7107 MEDIUM 5.3 UPGRADE A vulnerability classified as critical has been found in SimStudioAI sim up to 0.1.17
- CVE-2025-10096 MEDIUM 6.3 UPGRADE A vulnerability was determined in SimStudioAI sim up to 1.0.0
FAQ
How do I fix sim vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sim being exploited right now?
None of the tracked sim CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sim CVE should I patch first?
CVE-2025-15099 currently ranks highest (50/100): A vulnerability was identified in simstudioai sim up to 0.5.27.