PT-2025-54209 · Pangolin · Pangolin

Mrdgef · Published 2025-12-30 · Updated 2026-01-01 · CVE-2025-56332

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Pangolin versions 1.6.2 and earlier

Description An authentication bypass exists in Pangolin versions 1.6.2 and before due to an insecure default configuration. This allows attackers to access Pangolin resources.

Recommendations Update Pangolin to a version later than 1.6.2.

Exploit

Fix

Weakness Enumeration

CWE-1188

Related Identifiers

CVE-2025-56332

Affected Products

Pangolin

References · 7

• 🔥 https://gist.github.com/mrdgef/ef6fa41d69c0457874414c163d7d7d75 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-56332 · Security Note
• https://osv.dev/vulnerability/CVE-2025-56332 · Vendor Advisory
• https://github.com/fosrl/pangolin · Note
• https://twitter.com/VulmonFeeds/status/2006169338261229849 · Twitter Post
• https://twitter.com/CVEnew/status/2006861544903119007 · Twitter Post
• https://t.me/CVEtracker/40983 · Telegram Post