PT-2025-26618 · Unknown · Servicestack

Chudypb + 1 · Published 2025-06-23 · Updated 2025-06-25 · CVE-2025-6444

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: ServiceStack (affected versions not specified)

Description: This issue allows remote attackers to relay NTLM credentials on affected installations of ServiceStack. The specific flaw exists within the implementation of the GetErrorResponse method, resulting from the lack of proper validation of user-supplied data, which can lead to a type confusion condition. An attacker can leverage this to relay NTLM credentials in the context of the current user.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-6444

ZDI-25-415

Affected Products

Servicestack

References · 5

• https://osv.dev/vulnerability/CVE-2025-6444 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-25-415 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-6444 · Security Note
• https://twitter.com/CVEnew/status/1937939412978946069 · Twitter Post
• https://t.me/cvetracker/27042 · Telegram Post