CVE-2025-27581

Description

NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 allows users who lack the InET role to access the InET module via direct requests to known endpoints.

Affected Platforms

Weakness Type

CWE-425

References

• https://brics.cit.nih.gov
• https://github.com/RoseHacks/Vulnerability.Research/blob/main/CVE-2025-27581/REA…
• https://github.com/brics-dev/brics