What is GHSA-x6mh-4w8x-p34v?

GHSA-x6mh-4w8x-p34v is a security advisory published by GitHub Security Advisories with Critical severity. MineAdmin has an insecure default password

Which CVE IDs does GHSA-x6mh-4w8x-p34v cover?

GHSA-x6mh-4w8x-p34v covers the following CVE IDs: CVE-2025-65854. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-x6mh-4w8x-p34v?

GHSA-x6mh-4w8x-p34v has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-x6mh-4w8x-p34v?

GHSA-x6mh-4w8x-p34v affects 1 product, including: composer/mineadmin/mineadmin:\u003c= 3.0.9.

GHSA-x6mh-4w8x-p34vCriticalCVSS 9.8

MineAdmin has an insecure default password

Vendor

GitHub Security Advisories

Published

December 12, 2025

Last Modified

December 12, 2025

🔗 CVE IDs covered (1)

CVE-2025-65854 →

📋 Description

Insecure permissions in the scheduled tasks feature of MineAdmin v3.x allows attackers to execute arbitrary commands and execute a full account takeover.

🎯 Affected products1

composer/mineadmin/mineadmin:<= 3.0.9

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2025-65854
https://gist.github.com/SourByte05/1a6c6b08ac47c5d58eb7dd4422cc23b7
http://mineadmin.com
https://github.com/mineadmin/mine-core/blob/7994da7f5cd0778eb9aadd550c50c259cc1d1048/src/Command/InstallProjectCommand.php#L123
https://github.com/advisories/GHSA-x6mh-4w8x-p34v