PT-2026-1178 · Casaos · Casaos

Mike G.A + 1 · Publicado 2026-01-02 · Atualizado 2026-02-26 · CVE-2025-34171

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Média

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions CasaOS versions up to and including 0.4.15

Description CasaOS versions up to and including 0.4.15 have unauthenticated endpoints that allow remote attackers to retrieve sensitive configuration files and system debug information. The /v1/users/image API endpoint can be abused with a user-controlled path parameter to access files under /var/lib/casaos/1/, revealing installed applications and configuration details. The /v1/sys/debug API endpoint discloses host operating system, kernel, hardware, and storage information. These endpoints also return distinct error messages, enabling file existence enumeration of arbitrary paths on the underlying host filesystem. This information disclosure can be used for reconnaissance and to facilitate targeted follow-up attacks. The user-controlled path parameter in the /v1/users/image endpoint is a key component of the issue.

Recommendations CasaOS versions prior to 0.4.15 should be used.

Correção

RCE

Missing Authorization

Enumeração de Fraquezas

CWE-862

CWE-497

Identificadores relacionados

CVE-2025-34171

Produtos afetados

Casaos

Referências · 8

• https://github.com/IceWhaleTech/CasaOS · Nota
• https://casaos.zimaspace.com · Nota
• https://osv.dev/vulnerability/CVE-2025-34171 · Aviso do Fabricante
• https://t.me/cveNotify/153379 · Publicação no Telegram
• https://vulncheck.com/advisories/casaos-unauthenticated-file-and-debug-data-exposure · Nota
• https://t.me/cveNotify/147643 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-34171 · Nota de Segurança
• https://t.me/CVEtracker/41275 · Publicação no Telegram