PT-2025-40013 · Nicehash · Nicehash Quickminer

Princep49036142 · Published 2025-09-30 · Updated 2025-12-27 · CVE-2025-56513

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NiceHash QuickMiner version 6.12.0

Description The software updates are performed over HTTP without validating digital signatures or hash checks. An attacker intercepting or redirecting traffic to the update URL can hijack the update process and deliver arbitrary executables, leading to full remote code execution. This represents a critical supply chain attack vector.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-494

Related Identifiers

CVE-2025-56513

Affected Products

Nicehash Quickminer

References · 9

• 🔥 https://medium.com/@princep49036142/hijacking-the-miner-how-nicehashminers-auto-update-pipeline-enables-zero-click-rce-ed6a36b6769b · Exploit
• https://osv.dev/vulnerability/CVE-2025-56513 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-56513 · Security Note
• https://twitter.com/VulmonFeeds/status/1973104995026264369 · Twitter Post
• https://t.me/CVEtracker/33753 · Telegram Post
• https://twitter.com/princep49036142/status/2004996147543437411 · Twitter Post
• https://twitter.com/princep49036142/status/2003890172992340022 · Twitter Post
• https://medium.com/@princep49036142/hijacking-the-miner-zero-click-rce-in-nicehash-quickminer-cve-2025-56513-4a7190295e6c · Note
• https://twitter.com/CVEnew/status/2003567327879606302 · Twitter Post