stamparm/maltrail <=0.54 Remote Command Execution
Vulnerability Description
An unauthenticated command injection vulnerability exists in stamparm/maltrail (Maltrail) versions <=0.54. A remote attacker can execute arbitrary operating system commands via the username parameter in a POST request to the /login endpoint. This occurs due to unsafe handling of user-supplied input passed to subprocess.check_output() in core/http.py, allowing injection of shell metacharacters. Exploitation does not require authentication and commands are executed with the privileges of the Maltrail process.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-34073
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Chris Wild (@briskets)
References
- https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/http/maltrail_rce.rb
- https://huntr.com/bounties/be3c5204-fbd9-448d-b97c-96a8d2941e87
- https://github.com/stamparm/maltrail
- https://github.com/stamparm/maltrail/issues/19146
- https://vulncheck.com/advisories/stamparm-maltrail-rce
Affected Vendor
Stamparm
View all reports →