PT-2025-32469 · Unknown · Litmuschaos

Maique · Published 2025-08-10 · Updated 2025-08-13 · CVE-2025-8795

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: LitmusChaos Litmus versions prior to 3.19.1

Description: A critical vulnerability exists in LitmusChaos Litmus. The issue affects an unknown part of the /auth/login file. Manipulation of the projectID argument results in improper access controls, allowing for remote exploitation. The exploit has been publicly disclosed and may be used. The vendor was contacted regarding this disclosure but did not respond.

Recommendations: Update LitmusChaos Litmus to version 3.19.1 or later.

Exploit

Fix

Improper Access Control

Incorrect Privilege Assignment

Weakness Enumeration

CWE-284

CWE-266

Related Identifiers

CVE-2025-8795

Affected Products

Litmuschaos

References · 12

• 🔥 https://github.com/MaiqueSilva/VulnDB/blob/main/readme05.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-8795 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-8795 · Security Note
• https://twitter.com/VulmonFeeds/status/1954435785295282598 · Twitter Post
• https://t.me/cveNotify/131586 · Telegram Post
• https://vuldb.com/?submit.625984 · Note
• https://vuldb.com/?id.319323 · Note
• https://twitter.com/CVEnew/status/1954419295511072948 · Twitter Post
• https://t.me/cveNotify/132144 · Telegram Post
• https://vuldb.com/?ctiid.319323 · Note
• https://t.me/CVEtracker/29611 · Telegram Post
• https://twitter.com/f8sbrightermind/status/1954438514956779548 · Twitter Post