PT-2025-24560 · Caido · Caido

Ry0Tak · Published 2025-06-09 · Updated 2025-06-10 · CVE-2025-49004

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Caido versions prior to 0.48.0

Description Caido is a web security auditing toolkit that lacks protection for DNS rebinding, allowing it to be loaded on an attacker-controlled domain. This enables a malicious website to hijack the authentication flow of Caido and achieve code execution. A malicious website loaded in the browser can hijack the locally running Caido instance and achieve remote command execution during the initial setup. Even if the Caido instance is already configured, an attacker can initiate the authentication flow by performing DNS rebinding, requiring the victim to authorize the request on dashboard.caido.io.

Recommendations Upgrade to version 0.48.0 to receive a patch.

Exploit

Fix

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

CVE-2025-49004

GHSA-JMXF-XW2R-VJRG

Affected Products

Caido

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/49xxx/CVE-2025-49004.json · Exploit
• https://osv.dev/vulnerability/CVE-2025-49004 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-49004 · Security Note
• https://github.com/caido/caido/security/advisories/GHSA-jmxf-xw2r-vjrg · Note
• https://t.me/cvetracker/25827 · Telegram Post
• https://twitter.com/CVEnew/status/1932179241980060060 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1932256915842638037 · Twitter Post