CVE-2025-34073

🗓️ 02 Jul 2025 13:46:59Reported by VulnCheckType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 93 Views🌐 WEB

Unauthenticated command injection in Maltrail versions <=0.54 allows remote command execution.

Reporter	Title	Published	Views	Family All 12
bdu_fstec	The vulnerability of the Maltrail malware detection system lies in the lack of authentication for the critical function, allowing the attacker to execute arbitrary code.	14 Apr 202600:00	–	bdu_fstec
circl	CVE-2025-34073	16 Aug 202322:01	–	circl
cnnvd	maltrail 安全漏洞	2 Jul 202500:00	–	cnnvd
cvelist	CVE-2025-34073 stamparm/maltrail <=0.54 Remote Command Execution	2 Jul 202513:46	–	cvelist
euvd	EUVD-2025-19716	2 Jul 202513:46	–	euvd
metasploit	Maltrail Unauthenticated Command Injection	17 Aug 202319:51	–	metasploit
nuclei	Maltrail <=0.54 Username Parameter - Remote Command Execution	4 Feb 202607:00	–	nuclei
nvd	CVE-2025-34073	2 Jul 202514:15	–	nvd
osv	CVE-2025-34073	2 Jul 202514:15	–	osv
ptsecurity	PT-2025-27631	2 Jul 202500:00	–	ptsecurity

Vulners

Node

stamparm maltrailRange0–0.54

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "core/http.py – login request handler"
    ],
    "packageName": "maltrail",
    "packageURL": "pkg:github/stamparm/maltrail",
    "product": "Maltrail",
    "vendor": "Stamparm",
    "versions": [
      {
        "lessThanOrEqual": "0.54",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
github	www.github.com/stamparm/maltrail
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/http/maltrail_rce.rb
huntr	www.huntr.com/bounties/be3c5204-fbd9-448d-b97c-96a8d2941e87
vulncheck	www.vulncheck.com/advisories/stamparm-maltrail-rce
github	www.github.com/stamparm/maltrail/issues/19146

Parameter	Position	Path	Description	CWE
username	request body	/login	Unauthenticated command injection via username parameter leading to OS command execution on the Maltrail login endpoint.	CWE-306, CWE-78

17 Jun 2026 09:13Current

8.3High risk

Vulners AI Score8.3

CVSS 410

EPSS0.03884

SSVC