PT-2025-47210 · Unknown+1 · Onlyoffice+1

Published 2025-11-17 · Updated 2025-11-18 · CVE-2025-64766

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Onlyoffice versions 22.11 through 25.05 Onlyoffice versions prior to Unstable 25.11

Description Onlyoffice is a software suite providing tools for document editing, collaboration, and management. A hard-coded secret within the NixOS module for the OnlyOffice document server was used to protect its file cache. An attacker knowing an existing revision ID could potentially access a document. Obtaining an arbitrary revision ID is considered difficult in practice. The likely impact is access to known documents from users with expired access.

Recommendations Update to version 25.05 or later. Update to NixOS unstable version 25.11 or later.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2025-64766

GHSA-58M4-5WG3-5G5V

Affected Products

Nixos

Onlyoffice

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/64xxx/CVE-2025-64766.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-64766 · Security Note
• https://osv.dev/vulnerability/CVE-2025-64766 · Vendor Advisory
• https://github.com/NixOS/nixpkgs/pull/462204 · Note
• https://github.com/NixOS/nixpkgs/security/advisories/GHSA-58m4-5wg3-5g5v · Note
• https://github.com/NixOS/nixpkgs/commit/cec38dec00df26a901eb8b424d53bbb3bcc72eec · Note
• https://github.com/NixOS/nixpkgs/pull/462100 · Note
• https://github.com/NixOS/nixpkgs/commit/8e74d05e3de4ee5ad320cd585a7e0f12a4730869 · Note
• https://twitter.com/VulmonFeeds/status/1990638984905568400 · Twitter Post
• https://t.me/CVEtracker/37547 · Telegram Post
• https://twitter.com/CVEnew/status/1990538383483937142 · Twitter Post