CVE-2025-34073

🗓️ 02 Jul 2025 13:46:59Reported by VulnCheckType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 220 Views🌐 WEB

Unauthenticated command injection in Maltrail versions <=0.54 allows remote command execution.

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	Maltrail Authentication Code Execution	14 Apr 202600:00	–	bdu_fstec
Circl	CVE-2025-34073	16 Aug 202322:01	–	circl
CNNVD	Maltrail security vulnerability	2 Jul 202500:00	–	cnnvd
Cvelist	CVE-2025-34073 stamparm/maltrail <=0.54 Remote Command Execution	2 Jul 202513:46	–	cvelist
EUVD	EUVD-2025-19716	2 Jul 202513:46	–	euvd
Mend	CVE-2025-34073	2 Jul 202513:46	–	mend
Metasploit	Maltrail Unauthenticated Command Injection	31 Jul 202300:00	–	metasploit
Nuclei	Maltrail <=0.54 Username Parameter - Remote Command Execution	4 Feb 202607:00	–	nuclei
NVD	CVE-2025-34073	2 Jul 202514:15	–	nvd
osv_cve	CVE-2025-34073	2 Jul 202514:15	–	osv_cve

Vulners

Node

stamparm maltrailRange≤0.54

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "core/http.py – login request handler"
    ],
    "packageName": "maltrail",
    "packageURL": "pkg:github/stamparm/maltrail",
    "product": "Maltrail",
    "vendor": "Stamparm",
    "versions": [
      {
        "lessThanOrEqual": "0.54",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/http/maltrail_rce.rb
github	www.github.com/stamparm/maltrail/issues/19146
huntr	www.huntr.com/bounties/be3c5204-fbd9-448d-b97c-96a8d2941e87
vulncheck	www.vulncheck.com/advisories/stamparm-maltrail-rce
github	www.github.com/stamparm/maltrail

Parameter	Position	Path	Description	CWE
username	request body	/login	Unauthenticated command injection vulnerability in the username parameter of a POST request to the /login endpoint, caused by unsafe handling of input passed to subprocess.check_output().	CWE-306, CWE-78

17 Jun 2026 09:13Current

8.8High risk

Vulners AI Score8.8

CVSS 410

EPSS0.05472

SSVC