PT-2025-51353 · Unknown+1 · Freepbx Tts Module+1

Mcorybillington · Published 2025-12-16 · Updated 2025-12-21 · CVE-2025-67736

Positive Technologies (AI Summary)

CVSS v4.0

8.6

High

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions FreePBX tts module versions prior to 16.0.5 FreePBX tts module versions prior to 17.0.5

Description The Text to Speech (tts) module for FreePBX, a web-based graphical user interface for Asterisk, contains a SQL injection flaw. Authenticated users with administrator access can exploit this issue to extract sensitive information from the database. Successful exploitation allows for code execution on the system as the asterisk user, potentially leading to root privileges through privilege escalation. The vulnerable area is accessible through the Administrator Control Panel (ACP).

Recommendations Upgrade to FreePBX tts module version 16.0.5 or later. Upgrade to FreePBX tts module version 17.0.5 or later.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-67736

GHSA-632C-49P9-X7CW

Affected Products

Asterisk

Freepbx Tts Module

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/67xxx/CVE-2025-67736.json · Exploit
• https://github.com/FreePBX/security-reporting/security/advisories/GHSA-632c-49p9-x7cw · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-67736 · Vendor Advisory
• https://freepbx.org/watch-what-we-do-with-security-fixes-%f0%9f%91%80 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-67736 · Security Note
• https://t.me/CVEtracker/39901 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2000840496667648148 · Twitter Post
• https://twitter.com/CVEnew/status/2002836006257467445 · Twitter Post