The GitHub Integration API in Mintlify Platform before 2025-11-15 allows remote attackers to obtain sensitive repository metadata via the r…

published 2025-12-19 10 mo ago modified 2026-06-17 4 mo ago also EUVD-2025-204426

cvss: 5.0; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.4%; EPSS 0.4% chance of exploitation in 30 days, percentile 35%
public exploits: 0; none known

The GitHub Integration API in Mintlify Platform before 2025-11-15 allows remote attackers to obtain sensitive repository metadata via the repository owner and name fields. It fails to validate that the repository owner and name fields provided during configuration belong to the specific GitHub App Installation ID associated with the user's organization.

Patch / fix

fixed in 1

Mintlify Mintlify Platform 2025-11-15

CISA SSVC

Exploitation: Proof of concept is public
Automatable: yes
Technical impact: partial
Assessed: 10 mo ago (2025-12-19)

Exploit prediction

0.41% chance of exploitation in the next 30 days, higher than 35% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

kibty.town https://kibty.town/blog/mintlify/ referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
CNA	3.1	5.0	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
NVD	3.1	4.3	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected products

Mintlify Mintlify Platform

Classification

Weakness

CWE-425 Direct Request

References

kibty.town /blog/mintlify/
exploit, third-party-advisory
mintlify.com /blog/working-with-security-researchers-november-2025
vendor-advisory
mintlify.com /docs/changelog
release-notes
news.ycombinator.com /item?id=46317098
issue-tracking

Sources

CVE List CVE-2025-67844
NVD CVE-2025-67844

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary