PT-2025-50952 · Mineadmin · Mineadmin

Published 2025-12-12 · Updated 2025-12-19 · CVE-2025-65854

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MineAdmin versions 3.x

Description Insecure permissions within the scheduled tasks feature permit attackers to execute arbitrary commands and potentially gain full account control.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2025-65854

GHSA-X6MH-4W8X-P34V

Affected Products

Mineadmin

References · 8

• https://osv.dev/vulnerability/CVE-2025-65854 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-65854 · Security Note
• https://t.me/cveNotify/146404 · Telegram Post
• https://mineadmin.com · Note
• http://mineadmin.com · Note
• https://gist.github.com/SourByte05/1a6c6b08ac47c5d58eb7dd4422cc23b7 · Note
• https://t.me/CVEtracker/39636 · Telegram Post
• https://twitter.com/CVEnew/status/1999876855994712516 · Twitter Post