RomM

Beautiful, powerful, self-hosted rom manager and player

app

Alternative to: antstream arcade

Website Repository Docs

About Versions (100)

Back to Versions

3.10.3

2025-07-16

CVE-2025-53908

[!CAUTION] This release fixes a critical authenticated path traversal vulnerability in an API endpoint that could allow unauthorized access to system files. All previous versions are affected. All users should update immediately to this patch version. https://github.com/rommapp/romm/security/advisories/GHSA-fx9g-xw4j-jwc3

What’s Changed

Added proper input validation and sanitization to prevent directory traversal attacks by @gantoine in #2086

Full Changelog: https://github.com/rommapp/romm/compare/3.10.2…3.10.3

Changelog on GitHub →