PT-2025-52456 · Unknown · Turms Server

Xzzz111 · Published 2025-12-19 · Updated 2026-01-02 · CVE-2025-66910

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Turms Server versions prior to 0.10.0-SNAPSHOT

Description The software stores administrator passwords in plaintext within memory, specifically in the rawPassword field of AdminInfo objects, to improve authentication speed. This bypasses the bcrypt protection normally used. An attacker with local system access could obtain these passwords through methods like memory dumps or heap analysis.

Recommendations Update to a version newer than 0.10.0-SNAPSHOT.

Exploit

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

CWE-256

Related Identifiers

CVE-2025-66910

Affected Products

Turms Server

References · 8

• 🔥 https://github.com/Xzzz111/public_cve_report/blob/main/CVE-2025-66910_report.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-66910 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-66910 · Security Note
• https://github.com/turms-im/turms/blob/develop/turms-server-common/src/main/java/im/turms/server/common/domain/admin/bo/AdminInfo.java#L34 · Note
• https://github.com/turms-im/turms · Note
• https://github.com/turms-im/turms/blob/develop/turms-server-common/src/main/java/im/turms/server/common/domain/admin/service/BaseAdminService.java#L237 · Note
• https://twitter.com/CVEnew/status/2002099211983335482 · Twitter Post
• https://t.me/cveNotify/147600 · Telegram Post