CVE-2025-34073: stamparm/maltrail <=0.54 Remote Command Execution
An unauthenticated command injection vulnerability exists in stamparm/maltrail (Maltrail) versions <=0.54. A remote attacker can execute arbitrary operating system commands via the username parameter in a POST request to the /login endpoint. This occurs due to unsafe handling of user-supplied input passed to subprocess.checkoutput() in core/http.py, allowing injection of shell metacharacters. Exploitation does not require authentication and commands are executed with the privileges of the Maltrail process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-34073?
CVE-2025-34073 is considered a critical severity vulnerability due to the potential for remote command execution.
How do I fix CVE-2025-34073?
To fix CVE-2025-34073, upgrade Maltrail to version 0.55 or later to eliminate the command injection vulnerability.
Who is affected by CVE-2025-34073?
Any user or organization using Maltrail version 0.54 or earlier is affected by CVE-2025-34073.
Can CVE-2025-34073 be exploited without authentication?
Yes, CVE-2025-34073 can be exploited by unauthenticated remote attackers through the /login endpoint.
What type of attacks can be executed due to CVE-2025-34073?
CVE-2025-34073 allows attackers to execute arbitrary operating system commands, potentially leading to full system compromise.