CVE-2025-30007

Katalog CVE

CVSS 8.8 · High EPSS 3,2%

Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada hestiacp control panel. Skor CVSS 3.1 8.8 (High) menurut vulncheck.com.

Deskripsi (NVD)

HestiaCP before 1.9.5 contains an authenticated OS command injection vulnerability that allows low-privilege authenticated users to execute arbitrary commands as root by injecting a single-quote character into unvalidated DNS record types. Attackers can exploit insufficient input validation in is_dns_record_format_valid() combined with unsafe eval-based parsing in update_domain_zone() to prematurely close a variable assignment string and achieve full root code execution on the underlying host in a single DNS record creation step.

Rincian

Terbit di NVD

10 Juli 2026

Terakhir diubah

29 September 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber vulncheck.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

EPSS (30 hari)

3,2% peluang dieksploitasi; lebih tinggi dari 87,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/hestiacp/hestiacp/commit/a74babb739aa92e52b12d6ef52b6b9428ffbbb67 patch
• https://github.com/hestiacp/hestiacp/pull/5197 issue tracking · patch
• https://www.vulncheck.com/advisories/hestiacp-authenticated-os-command-injection-via-dns-record-management advisory pihak ketiga
• https://github.com/hestiacp/hestiacp/releases/tag/1.9.5 release notes