PT-2025-35495 · Unknown · Streamvault

Ltltlxey · Published 2025-09-01 · Updated 2025-09-01 · CVE-2025-57799

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions StreamVault versions prior to 250822

Description StreamVault is a multi-platform video parsing and downloading tool. Prior to version 250822, after logging into the StreamVault system, an attacker can modify system parameters, construct malicious commands, and execute command injection attacks against the system, potentially gaining server privileges. Users who have not modified their background passwords or use weak passwords are at risk of remote system takeover.

Recommendations Update StreamVault to version 250822 or later.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2025-57799

GHSA-QG4R-92HV-G9F4

Affected Products

Streamvault

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/57xxx/CVE-2025-57799.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-57799 · Security Note
• https://osv.dev/vulnerability/CVE-2025-57799 · Vendor Advisory
• https://github.com/lemon8866/StreamVault/commit/2e3f1f54b7d8a4e6389b640796866ac1108780ef · Note
• https://github.com/lemon8866/StreamVault/security/advisories/GHSA-qg4r-92hv-g9f4 · Note
• https://t.me/CVEtracker/31444 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1962565558374732085 · Twitter Post
• https://twitter.com/CVEnew/status/1962550512261202403 · Twitter Post
• https://twitter.com/CveFindCom/status/1962548484889845805 · Twitter Post