CVE-2025-48703criticalunder attackCWE-78

CVE-2025-48703: critical vulnerability in centos-webpanel CentOS Web Panel

Published · Updated

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9epss 100%
from disclosure to weapon0 days
Published on NVDSep 19
1st PoCJun 26
CISA KEV+46d
exploitation probability
100%top 1% of all CVEs
observed exploitation
yesCISA + VulnCheck
7 public exploit(s)
Action required by CISAfederal deadline: 2025-11-25

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

In short

CWP (Control Web Panel) before version 0.9.8.1205 has a critical flaw that lets attackers run malicious commands on the server without logging in. They exploit this by injecting shell commands into a file permission change request, as long as they know a non-root username.

Technical detail

CWE-78 OS command injection exists in the filemanager changePerm endpoint where the t_total parameter is not properly sanitized before being passed to shell execution. An unauthenticated attacker can inject shell metacharacters to achieve remote code execution, provided they possess a valid non-root username. The vulnerability affects versions prior to 0.9.8.1205.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1205 allows unauthenticated remote code execution via shell metacharacters in the t_total parameter in a filemanager changePerm request. A valid non-root username must be known.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
centos-webpanel · CentOS Web Panel
public PoCs found — 7
githubgithub.com/Skynoxk/CVE-2025-48703★ 4githubgithub.com/ftz7/PoC-CVE-2025-48703★ 2githubgithub.com/itstarsec/CVE-2025-48703★ 0vulncheckvulncheck.com/xdb/8f0fc08a3035unverifiedvulncheckvulncheck.com/xdb/72b1f2c9adabunverifiedvulncheckvulncheck.com/xdb/eccf2fe611b8unverifiedvulncheckvulncheck.com/xdb/7000a73bc367unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
https://control-webpanel.com/changeloghttps://fenrisk.com/rce-centos-webpanelhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-48703