CVE-2025-54305

The Thermo Fisher Torrent Suite Django application version 5.18.1 is vulnerable to an authentication bypass via the LocalhostAuthMiddleware component. The root cause is that the middleware automatically authenticates users as ionadmin if the REMOTE_ADDR property in request.META matches 127.0.0.1,...