CVE-2025-63601

9.9

CRITICALCVSS v3

Published

November 5, 2025

Affected

4 projects

Assigned by

MITRE

Severity scale

010

Description

Snipe-IT before version 8.3.3 contains a remote code execution vulnerability that allows an authenticated attacker to upload a malicious backup file containing arbitrary files and execute system commands.

grokability/snipe-it

GitHubA free open source IT asset/license management system

< 8.3.3NVD

snipeit

Python Package IndexPython library to access the SnipeIT API

< 8.3.3NVD

snipe/snipe-it

Docker Hub

More on this CVE

NVD↗GitHub Advisory↗

The *only* official docker hub repository for Snipe-IT from the maintainers of Snipe-IT.

< 8.3.3NVD

grokability/snipe-it

Docker HubPlease pull from snipe/snipe-it to get the latest version of the official Snipe-IT image.

< 8.3.3NVD

Security Advisories

CVE-2025-63601

Description

More on this CVE