PT-2025-38230 · Thorium · Thorium

CVE-2025-35431 · Published 2025-08-21 · Updated 2025-09-18

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Thorium versions prior to 1.1.1

Description Thorium does not escape user-controlled strings used in LDAP queries. An authenticated remote attacker can modify LDAP authorization data, such as group memberships.

Recommendations Update to version 1.1.1 or later.

Exploit

Fix

Weakness Enumeration

CWE-90

Related Identifiers

BDU:2026-03191

CVE-2025-35431

Affected Products

Thorium

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/35xxx/CVE-2025-35431.json · Exploit
• https://github.com/cisagov/thorium/commit/7c94a0b9bc2dc55e0c307360452f348bac06820c#diff-45e1e58dfb6faacf9efe778c31ead287d8e13ae07c5dad084c792bc4a0605a68R1007-R1008 · Patch
• https://bdu.fstec.ru/vul/2026-03191 · Security Note
• https://osv.dev/vulnerability/CVE-2025-35431 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-35431 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-35431 · Security Note
• https://github.com/cisagov/thorium/releases/tag/1.1.1 · Note
• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-259-01.json · Note
• https://twitter.com/CVEnew/status/1968561242496204836 · Twitter Post
• https://t.me/CVEtracker/32772 · Telegram Post