N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-48935

CVE-2025-48935: Deno has --allow-read / --allow-write permission bypass in `node:sqlite`

Summary

It is possible to bypass Deno's read/write permission checks by using ATTACH DATABASE statement.

PoC

// poc.js
import { DatabaseSync } from "node:sqlite"

const db = new DatabaseSync(":memory:");
db.exec("ATTACH DATABASE 'test.db' as test;");

db.exec("CREATE TABLE test.test (id INTEGER PRIMARY KEY, name TEXT);");

$ deno poc.js

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-48935

CVE-2025-48935:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
deno	rust	>= 2.2.0, < 2.2.5	2.2.5
deno_node	rust	>= 0.129.0, < 0.134.0	0.134.0

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability, CVE-2025-48935 (GHSA-8vxj-4cph-c596), is a permission bypass in Deno's node:sqlite module. It allows bypassing Deno's read/write permission checks using the ATTACH DATABASE SQL statement. The root cause of this vulnerability lies in the open_db function located in ext/node/ops/sqlite/database.rs. This function is responsible for creating and initializing SQLite database connections.

Before the fix, open_db did not configure the SQLite connection to restrict potentially harmful features. Specifically, it did not disable the ATTACH DATABASE command (via SQLITE_DBCONFIG_ENABLE_ATTACH_WRITE) nor did it limit the number of databases that could be attached (via SQLITE_LIMIT_ATTACHED). Consequently, when a user executed an ATTACH DATABASE command (e.g., through DatabaseSync.exec()), SQLite would process it without these restrictions, potentially allowing access to arbitrary files on the filesystem, thus bypassing Deno's permission model.

The provided patch (commit 31a97803995bd94629528ba841b2418d3ca01860) directly modifies the open_db function to introduce these missing security configurations. It adds calls to a new helper function set_db_config to explicitly disable SQLITE_DBCONFIG_ENABLE_ATTACH_WRITE (preventing attached databases from being written to in some contexts, though the primary fix is limiting attachments) and SQLITE_DBCONFIG_ENABLE_LOAD_EXTENSION (as a defense-in-depth measure). Crucially, it also calls conn.set_limit(Limit::SQLITE_LIMIT_ATTACHED, 0) to prevent any databases from being attached.

While the DatabaseSync.exec() method (and its underlying Deno op) is the function that processes the malicious ATTACH DATABASE SQL statement from the user, the vulnerability itself resides in the insecure setup of the connection by open_db. The exec method's behavior becomes problematic only because the connection it operates on is not properly restricted. Therefore, open_db is identified as the vulnerable function because its previous implementation created the insecure state that enabled the permission bypass.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.