A vulnerability classified as critical was found in cloudinary up to 2.6.x. Affected is an unknown function. Executing manipulation can lead to argument injection.

This vulnerability is registered as CVE-2025-12613. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.