CVE-2025-67843: Mintlify

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

A Server-Side Template Injection (SSTI) vulnerability in the MDX Rendering Engine in Mintlify Platform before 2025-11-15 allows remote attackers to execute arbitrary code via inline JSX expressions in an MDX file.

Affected products

• Mintlify Mintlify: before 2025-11-15 (fixed in 2025-11-15)

Published 2025-12-19. Last modified 2026-06-17.