CVE-2025-27364: OS Command Injection
First published: Mon Feb 24 2025(Updated: )
In MITRE Caldera through 4.2.0 and 5.0.0 before 35bc06e, a Remote Code Execution (RCE) vulnerability was found in the dynamic agent (implant) compilation functionality of the server. This allows remote attackers to execute arbitrary code on the server that Caldera is running on via a crafted web request to the Caldera server API used for compiling and downloading of Caldera's Sandcat or Manx agent (implants). This web request can use the gcc -extldflags linker flag with sub-commands.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| MITRE CALDERA | >=4.2.0<5.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/mitre/caldera/releases
- https://github.com/mitre/caldera/security
- https://medium.com/@mitrecaldera/mitre-caldera-security-advisory-remote-code-execution-cve-2025-27364-5f679e2e2a0e
- https://github.com/mitre/caldera/commit/35bc06e42e19fe7efbc008999b9f993b1b7109c0
- https://github.com/mitre/caldera/pull/3131/commits/61de40f92a595bed462372a5e676c2e5a32d1050
- https://github.com/mitre/caldera/pull/3129
- https://www.theregister.com/2025/02/25/10_bug_mitre_caldera/
Frequently Asked Questions
What is the severity of CVE-2025-27364?
CVE-2025-27364 is classified as a critical Remote Code Execution vulnerability.
How do I fix CVE-2025-27364?
To mitigate CVE-2025-27364, upgrade MITRE Caldera to versions 5.0.0 or later to ensure security against this vulnerability.
What versions of MITRE Caldera are affected by CVE-2025-27364?
CVE-2025-27364 affects MITRE Caldera versions from 4.2.0 up to, but not including, 5.0.0.
What type of vulnerability is CVE-2025-27364?
CVE-2025-27364 is a Remote Code Execution vulnerability that allows attackers to execute arbitrary code on the server.
Where can I find more information about CVE-2025-27364?
For more information about CVE-2025-27364, check the official MITRE Caldera releases and security advisory.
- collector/nvd-api
- source/NVD
- collector/the-register
- source/The Register
- alias/CVE-2025-27364
- alias/CVE-2024-34331
- agent/last-modified-date
- agent/author
- agent/first-publish-date
- agent/type
- agent/weakness
- agent/references
- agent/description
- agent/trending
- agent/source
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/event
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- agent/tags
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/news-ai
- exploited/true
- vendor/mitre
- canonical/mitre caldera