PT-2025-9682 · Rack+5 · Rack+5

Masamuneee · Published 2025-03-04 · Updated 2026-03-13 · CVE-2025-27111

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Rack versions prior to 2.2.12 Rack versions prior to 3.0.13 Rack versions prior to 3.1.11

Description The issue concerns the Rack::Sendfile middleware, which logs unsanitised header values from the X-Sendfile-Type header. An attacker can exploit this by injecting escape sequences, such as newline characters, into the header, resulting in log injection.

Recommendations For versions prior to 2.2.12, update to version 2.2.12 or later. For versions prior to 3.0.13, update to version 3.0.13 or later. For versions prior to 3.1.11, update to version 3.1.11 or later.

Exploit

Fix

Weakness Enumeration

CWE-117

CWE-93

Related Identifiers

BDU:2025-04293

CVE-2025-27111

DLA-4090-1

DSA-5886-1

GHSA-8CGQ-6MH2-7J6V

MGASA-2025-0311

OESA-2025-1299

OPENSUSE-SU-2025:14859-1

OPENSUSE-SU-2025:14875-1

OPENSUSE-SU-2025_0874-1

OPENSUSE-SU-2025_1492-1

OPENSUSE-SU-2026:10286-1

OPENSUSE-SU-2026:10358-1

SUSE-SU-2025:0874-1

SUSE-SU-2025:1492-1

USN-7366-1

USN-7366-2

Affected Products

Debian

Linuxmint

Rack

Red Os

Suse

Ubuntu

References · 89

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/27xxx/CVE-2025-27111.json · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2025-27111.yml · Exploit
• https://github.com/rack/rack/commit/aeac570bb8080ca7b53b7f2e2f67498be7ebd30b · Patch
• https://github.com/rack/rack/security/advisories/GHSA-8cgq-6mh2-7j6v · Vendor Advisory
• https://github.com/rack/rack/commit/803aa221e8302719715e224f4476e438f2531a53 · Patch
• https://github.com/rack/rack/commit/b13bc6bfc7506aca3478dc5ac1c2ec6fc53f82a3 · Patch
• https://ubuntu.com/security/CVE-2025-25184 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-27111 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:0874-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0224SE18 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7366-2 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7366-2 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:14875-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-04293 · Security Note
• https://osv.dev/vulnerability/OESA-2025-1299 · Vendor Advisory