PT-2025-45042 · Glpi+1 · Glpi Inventory Plugin+1

Published 2025-11-04 · Updated 2025-12-03 · CVE-2025-32786

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions GLPI Inventory Plugin versions 1.5.0 and below

Description The GLPI Inventory Plugin, which manages network discovery, inventory, software deployment, and data collection for GLPI agents, contains a SQL Injection issue. The plugin is vulnerable when handling certain operations, potentially allowing an attacker to manipulate database queries.

Recommendations Update to GLPI Inventory Plugin version 1.5.1 or later.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

BDU:2025-15581

CVE-2025-32786

GHSA-W2CP-R675-6XPQ

Affected Products

Glpi Inventory Plugin

Red Os

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/32xxx/CVE-2025-32786.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-32786 · Security Note
• https://osv.dev/vulnerability/CVE-2025-32786 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-15581 · Security Note
• https://github.com/glpi-project/glpi-inventory-plugin/releases/tag/1.5.1 · Note
• https://github.com/glpi-project/glpi-inventory-plugin/security/advisories/GHSA-w2cp-r675-6xpq · Note
• https://github.com/glpi-project/glpi-inventory-plugin/blob/1.5.1/CHANGELOG.md · Note
• https://t.me/CVEtracker/36550 · Telegram Post
• https://redos.red-soft.ru/support/secure/uyazvimosti/uyazvimost-glpi-plugin-glpiinventory-cve-2025-32786/?sphrase_id=1370823 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-glpi-plugin-glpiinventory-cve-2025-32786 · Note