CVE-2025-68932: FreshRSS has weak cryptographic randomness in remember-me token and nonce generation
FreshRSS is a free, self-hostable RSS aggregator. Prior to version 1.28.0, FreshRSS uses cryptographically weak random number generators (mtrand() and uniqid()) to generate remember-me authentication tokens and challenge-response nonces. This allows attackers to predict valid session tokens, leading to account takeover through persistent session hijacking. The remember-me tokens provide permanent authentication and are the sole credential for "keep me logged in" functionality. This issue has been patched in version 1.28.0.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68932?
CVE-2025-68932 is considered a moderate severity vulnerability due to its potential to allow attackers to predict session tokens.
How do I fix CVE-2025-68932?
To fix CVE-2025-68932, upgrade FreshRSS to version 1.28.0 or later, which implements a secure random number generator.
What types of software are affected by CVE-2025-68932?
CVE-2025-68932 affects FreshRSS versions prior to 1.28.0 that use weak random number generators.
Can CVE-2025-68932 lead to session hijacking?
Yes, CVE-2025-68932 can lead to session hijacking, as attackers may predict valid authentication tokens.
When was CVE-2025-68932 published?
CVE-2025-68932 was published in 2025, highlighting a vulnerability in earlier versions of FreshRSS.