CVE-2025-21618: NiceGUI is an easy-to-use, Python-based UI framework. Prior to 2.9.1, authenticating with NiceGUI logged in the user for all browsers, including browsers in…

PriorityP338high7.5CVSS 3.1

AVNACLPRNUINSUCNIHAN

EPSS

0.37%

28.6th percentile

NiceGUI is an easy-to-use, Python-based UI framework. Prior to 2.9.1, authenticating with NiceGUI logged in the user for all browsers, including browsers in incognito mode. This vulnerability is fixed in 2.9.1.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
zauberzeug	nicegui	< 2.9.1	2.9.1
zauberzeug	nicegui	>= 0 < 2.9.1	2.9.1

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.