Is CVE-2025-65021 actively exploited?

No active exploitation of CVE-2025-65021 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2025-65021 be exploited remotely?

Yes. CVE-2025-65021 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2025-65021?

CVE-2025-65021 has a CVSS score of 9.1 (CRITICAL).

HOME VULNERABILITIESCVE-2025-65021

CRITICAL

CVE-2025-65021

CWE-285Published: November 19, 2025· Updated: Jun 17, 2026

9.1

CVSS v3.1

Official Description

Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an Insecure Direct Object Reference (IDOR) vulnerability exists in the poll finalization feature of the application. Any authenticated user can finalize a poll they do not own by manipulating the pollId parameter in the request. This allows unauthorized users to finalize other users’ polls and convert them into events without proper authorization checks, potentially disrupting user workflows and causing data integrity and availability issues. This issue has been patched in version 4.5.4.

NVD Source

Risk Analysis

This critical Insecure Direct Object Reference (IDOR) vulnerability in Rallly versions prior to 4.5.4 allows any authenticated user to finalize polls they do not own. By manipulating the 'pollId' parameter, an attacker can disrupt user workflows and cause data integrity and availability issues. The CVSS score of 9.1 indicates a high severity, making this an urgent concern.

No public exploit is currently known for this vulnerability. Exploitation requires an authenticated user to manipulate a parameter in a request.

Recommended Action

Organizations using Rallly should upgrade to version 4.5.4 or later immediately. Implement robust authorization checks to ensure users can only interact with resources they own.

Generated by the CTIWATCH analysis pipeline from this CVE's metadata (CVSS, EPSS, KEV status, exploit intelligence). Verify against vendor advisories before acting.

Technical Analysis

CVE-2025-65021 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 9.1.