CVE-2025-67738

squid/cachemgr.cgi in Webmin before 2.600 does not properly quote arguments. This is relevant if Webmin's Squid module and its Cache Manager feature are available, and an untrusted party is able to authenticate to Webmin and has certain Cache Manager permissions (the "cms" security option).

CVSS v3 8.5 HIGH

8.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://github.com/webmin/webmin/commit/1a52bf4d72f9da6d79250c66e51f41c6f5b880ee
https://github.com/webmin/webmin/compare/2.520...2.600
https://webmin.com/security/#privilige-escalation-using-squid-module-cve-2025-67738

Configurations

No configuration.

History

14 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) squid/cachemgr.cgi en Webmin anterior a 2.600 no cita correctamente los argumentos. Esto es relevante si el módulo Squid de Webmin y su función de Administrador de Caché están disponibles, y una entidad no confiable puede autenticarse en Webmin y tiene ciertos permisos del Administrador de Caché (la opción de seguridad 'cms').

Information

Published : 2025-12-11 07:16

Updated : 2026-10-14 21:10

NVD link : CVE-2025-67738

Mitre link : CVE-2025-67738

CVE.ORG link : CVE-2025-67738

JSON object : View

Products Affected

No product.

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

{"id": "CVE-2025-67738", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-67738", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-12-11T14:57:49.832453Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "cve@mitre.org", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 1.8}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "Webmin", "product": "Webmin", "versions": [{"status": "affected", "version": "0", "lessThan": "2.600", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2025-12-11T07:16:00.887", "references": [{"url": "https://github.com/webmin/webmin/commit/1a52bf4d72f9da6d79250c66e51f41c6f5b880ee", "source": "cve@mitre.org"}, {"url": "https://github.com/webmin/webmin/compare/2.520...2.600", "source": "cve@mitre.org"}, {"url": "https://webmin.com/security/#privilige-escalation-using-squid-module-cve-2025-67738", "source": "cve@mitre.org"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "cve@mitre.org", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "squid/cachemgr.cgi in Webmin before 2.600 does not properly quote arguments. This is relevant if Webmin's Squid module and its Cache Manager feature are available, and an untrusted party is able to authenticate to Webmin and has certain Cache Manager permissions (the \"cms\" security option)."}, {"lang": "es", "value": "squid/cachemgr.cgi en Webmin anterior a 2.600 no cita correctamente los argumentos. Esto es relevante si el m\u00f3dulo Squid de Webmin y su funci\u00f3n de Administrador de Cach\u00e9 est\u00e1n disponibles, y una entidad no confiable puede autenticarse en Webmin y tiene ciertos permisos del Administrador de Cach\u00e9 (la opci\u00f3n de seguridad 'cms')."}], "lastModified": "2026-10-14T21:10:00.183", "sourceIdentifier": "cve@mitre.org"}