CVE-2025-67397

Published January 5th, 2026

View on NVD ↗

CVSS v3

9.1

CRITICAL

CVSS v2

N/A

Affected

PROJECT

Description

An issue in Passy v.1.6.3 allows a remote authenticated attacker to execute arbitrary commands via a crafted HTTP request using a specific payload injection.

giulioschiavone/Vulnerability-Research

All cve discovered - Use for tracking

GitHub