PT-2025-33843 · Genx Fx+2 · Genx Fx+3

Mouy-Leng · Published 2025-08-19 · Updated 2025-08-24 · CVE-2025-55306

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: GenX FX (affected versions not specified)

Description: GenX FX is an IA trading platform focused on forex trading. A flaw in the backend may expose API keys and authentication tokens if environment variables are misconfigured. This could allow unauthorized users to access cloud resources, including Google Cloud, Firebase, and GitHub.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2025-55306

GHSA-2XJQ-PVWJ-MVM6

Affected Products

Firebase

Genx Fx

Github

Google Cloud

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/55xxx/CVE-2025-55306.json · Exploit
• https://osv.dev/vulnerability/CVE-2025-55306 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-55306 · Security Note
• https://github.com/Mouy-leng/GenX_FX/security/advisories/GHSA-2xjq-pvwj-mvm6 · Note
• https://twitter.com/cracbot/status/1959571455575982432 · Twitter Post
• https://twitter.com/CveFindCom/status/1957875288475328770 · Twitter Post
• https://twitter.com/offseq/status/1958046471715958937 · Twitter Post
• https://twitter.com/CVEnew/status/1957877391969185839 · Twitter Post
• https://t.me/CVEtracker/30387 · Telegram Post