RCE in Stamparm Maltrail
CVE-2025-34073
An unauthenticated command injection vulnerability exists in stamparm/maltrail (Maltrail) versions <=0.54. A remote attacker can execute arbitrary operating system commands via the username parameter in a POST request to the /login endpoint. This occurs due to unsafe handling of user-supplied input passed to subprocess.check_output() in core/http.py, allowing injection of shell metacharacters. Exploitation does not require authentication and commands are executed with the privileges of the Maltrail process.
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.039 (89.3th percentile) — read the EPSS interpretation.
Affected products
- Stamparm Maltrail — versions 0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- disclosure@vulncheck.com (exploit)
- disclosure@vulncheck.com (exploit, third-party-advisory)
- disclosure@vulncheck.com (product)
- disclosure@vulncheck.com (issue-tracking)
- disclosure@vulncheck.com (third-party-advisory)
Frequently asked questions
- What is CVE-2025-34073?
- CVE-2025-34073 is a vulnerability in Stamparm Maltrail, classified under OS Command Injection. Published 2025-07-02.
- Is CVE-2025-34073 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.