PT-2025-32468 · Unknown · Litmuschaos Litmus

Maique · Published 2025-08-10 · Updated 2025-08-13 · CVE-2025-8794

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: LitmusChaos Litmus versions prior to 3.19.1

Description: A problematic issue exists in the LocalStorage Handler component of LitmusChaos Litmus. Manipulation of the projectID argument can lead to authorization bypass. Local access is required for exploitation. The details of this issue have been publicly disclosed, and the vendor did not respond to early disclosure attempts.

Recommendations: Update LitmusChaos Litmus to version 3.19.1 or later.

Exploit

Fix

Improper Authorization

IDOR

Weakness Enumeration

CWE-285

CWE-639

Related Identifiers

CVE-2025-8794

Affected Products

Litmuschaos Litmus

References · 11

• 🔥 https://github.com/MaiqueSilva/VulnDB/blob/main/readme04.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-8794 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-8794 · Security Note
• https://t.me/cveNotify/132143 · Telegram Post
• https://vuldb.com/?ctiid.319322 · Note
• https://twitter.com/f8sbrightermind/status/1954438515879543103 · Twitter Post
• https://t.me/CVEtracker/29610 · Telegram Post
• https://t.me/cveNotify/131585 · Telegram Post
• https://vuldb.com/?submit.625982 · Note
• https://twitter.com/CVEnew/status/1954407008880169098 · Twitter Post
• https://vuldb.com/?id.319322 · Note