PT-2025-1074 · Palo Alto Networks · Palo Alto Networks Expedition

Published 2025-01-08 · Updated 2026-01-23 · CVE-2025-0105

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Expedition (affected versions not specified)

Description The issue is related to an arbitrary file deletion vulnerability in Palo Alto Networks Expedition. This vulnerability allows an unauthenticated attacker to delete arbitrary files accessible to the www-data user on the host filesystem. The vulnerability is also associated with incorrect external control of a file name or path, which can be exploited by a remote attacker to delete files.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-73

Related Identifiers

BDU:2025-00309

CVE-2025-0105

Affected Products

Palo Alto Networks Expedition

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-0105 · Security Note
• https://security.paloaltonetworks.com/PAN-SA-2025-0001 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-0105 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-00309 · Security Note
• https://reddit.com/r/PaloConfigs/comments/1i035g1/mitigating_cve20250001_why_its_time_to_transition · Reddit Post
• https://t.me/cvedetector/15022 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1878009606351303018 · Twitter Post
• https://t.me/cveNotify/149760 · Telegram Post
• https://twitter.com/johndjohnson/status/1877780230917456050 · Twitter Post
• https://twitter.com/CVEnew/status/1877921982806695938 · Twitter Post