CVE-2025-45731: Race Condition

Published Jul 24, 2025

Updated

A group deletion race condition in 2FAuth v5.5.0 causes data inconsistencies and orphaned accounts when a group is deleted while other operations are pending.

Affected Software

2 affected components

2FAuth 2FAuth

2FAuth 2FAuth=5.4.3

Event History

Jul 24, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-45731?

CVE-2025-45731 is classified as a medium severity vulnerability due to the potential for data inconsistencies and orphaned accounts.

How do I fix CVE-2025-45731?

To fix CVE-2025-45731, ensure that your system implements proper locking mechanisms during group deletion processes.

What operations are affected by CVE-2025-45731?

CVE-2025-45731 affects operations involving group deletion and concurrent data modification within the 2FAuth application.

Can CVE-2025-45731 lead to data loss?

Yes, CVE-2025-45731 can lead to data loss by creating orphaned accounts due to race conditions during group deletions.

Is there a workaround for CVE-2025-45731?

A possible workaround for CVE-2025-45731 is to avoid performing concurrent operations on group deletions until a patch is applied.