CVE-2025-54138

Katalog CVE

CVSS 7.5 · High EPSS 1,2%

Kerentanan Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') pada librenms. Skor CVSS 3.1 7.5 (High) menurut github.com.

Deskripsi (NVD)

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems. LibreNMS versions 25.6.0 and below contain an architectural vulnerability in the ajax_form.php endpoint that permits Remote File Inclusion based on user-controlled POST input. The application directly uses the type parameter to dynamically include .inc.php files from the trusted path includes/html/forms/, without validation or allowlisting. This pattern introduces a latent Remote Code Execution (RCE) vector if an attacker can stage a file in this include path — for example, via symlink, development misconfiguration, or chained vulnerabilities. This is fixed in version 25.7.0.

Rincian

Terbit di NVD

22 Juli 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber github.com
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-98: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 66,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/librenms/librenms/security/advisories/GHSA-gq96-8w38-hhj2 exploit · advisory vendor
• https://github.com/librenms/librenms/commit/ec89714d929ef0cf2321957ed9198b0f18396c81 patch
• https://github.com/librenms/librenms/pull/17990 issue tracking
• https://github.com/librenms/librenms/releases/tag/25.7.0 release notes