PT-2025-51980 · Zerobyte · Zerobyte

T0Mer · Published 2025-12-17 · Updated 2026-03-05 · CVE-2025-68435

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Zerobyte versions prior to 0.18.5 Zerobyte versions prior to 0.19.0

Description Zerobyte, a backup automation tool, has an issue where authentication middleware is not correctly applied to certain API endpoints. This allows access to these endpoints without valid session credentials. The issue is considered dangerous for instances exposed outside of internal networks. The vulnerable API endpoints are accessible without authentication.

Recommendations Versions prior to 0.18.5 should be updated to version 0.18.5 or later. Versions prior to 0.19.0 should be updated to version 0.19.0 or later. If an immediate upgrade is not possible, restrict network access to the Zerobyte instance to trusted networks using firewall rules or network segmentation.

Exploit

Fix

Weakness Enumeration

CWE-305

Related Identifiers

CVE-2025-68435

GHSA-X539-C98Q-38GV

Affected Products

Zerobyte

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68435.json · Exploit
• https://github.com/nicotsx/zerobyte/security/advisories/GHSA-x539-c98q-38gv · Vendor Advisory
• https://github.com/nicotsx/zerobyte/commit/13e080a18967705bd2b4e110e5f7693fdca1c692 · Patch
• https://osv.dev/vulnerability/CVE-2025-68435 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68435 · Security Note
• https://github.com/nicotsx/zerobyte/issues/161 · Note
• https://twitter.com/CveFindCom/status/2001437034922070354 · Twitter Post
• https://twitter.com/CCBalert/status/2001664673989452029 · Twitter Post
• https://t.me/cveNotify/154381 · Telegram Post
• https://twitter.com/CVEnew/status/2002487766714823046 · Twitter Post
• https://twitter.com/TheHackerWire/status/2001432775443017839 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2001603347787272466 · Twitter Post
• https://t.me/CVEtracker/40104 · Telegram Post
• https://twitter.com/0dayPublishing/status/2001433595777302792 · Twitter Post