CVE-2025-65029

HIGH

rallly < 4.5.4 - Authenticated Insecure Direct Object Reference in Participant Deletion Endpoint

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2025-65029. PoCs published by alaeddine03.

AI-analyzed exploit summary This repository provides a detailed description of CVE-2025-65029, an Insecure Direct Object Reference (IDOR) vulnerability in Rallly. The vulnerability allows authenticated users to delete arbitrary participants from polls without proper ownership verification, impacting data integrity and availability.

Description

Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an insecure direct object reference (IDOR) vulnerability allows any authenticated user to delete arbitrary participants from polls without ownership verification. The endpoint relies solely on a participant ID to authorize deletions, enabling attackers to remove other users (including poll owners) from polls. This impacts the integrity and availability of poll participation data. This issue has been patched in version 4.5.4.

Exploits (1)

github WRITEUP

by alaeddine03 · poc

https://github.com/alaeddine03/CVE-Disclosures/tree/main/Rallly/CVE-2025-65029

View Code ZIP pw:eip

This repository provides a detailed description of CVE-2025-65029, an Insecure Direct Object Reference (IDOR) vulnerability in Rallly. The vulnerability allows authenticated users to delete arbitrary participants from polls without proper ownership verification, impacting data integrity and availability.

Classification

Writeup 90%

Attack Type

Auth Bypass

Complexity

Trivial

Reliability

Reliable

Target: Rallly < 4.5.4

Auth required

Prerequisites: Authenticated user access to Rallly

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1078 - Valid Accounts

devstral-2 · analyzed Feb 27, 2026 Full analysis →

References (2)

Core 2

Core References

Exploit, Vendor Advisory x_refsource_confirm

https://github.com/lukevella/rallly/security/advisories/GHSA-f8jc-6746-ww95

Release Notes x_refsource_misc

https://github.com/lukevella/rallly/releases/tag/v4.5.4

Scores

CVSS v3 8.1

EPSS 0.0028

EPSS Percentile 19.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-639 CWE-862 CWE-285

Status published

Products (1)

rallly/rallly < 4.5.4

Published Nov 19, 2025

Tracked Since Feb 18, 2026