What is CVE-2025-44163?

CVE-2025-44163 is a medium-severity vulnerability in Raspap Raspap-Webgui, classified under Relative Path Traversal. CVSS score: 6.3/10. Published 2025-06-27.

How severe is CVE-2025-44163?

Medium severity. CVSS v3 base score is 6.3 out of 10.

Path Traversal in Raspap Raspap-Webgui

CVE-2025-44163

RaspAP raspap-webgui 3.3.1 is vulnerable to Directory Traversal in ajax/networking/get_wgkey.php. An authenticated attacker can send a crafted POST request with a path traversal payload in the `entity` parameter to overwrite arbitrary files writable by the web server via abuse of the `tee` command used in shell execution.

EPSS: 0.006 (45.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L.

Affected products

Raspap Raspap-webgui — versions 3.3.1
N/a — versions n/a

Weakness classification (CWE)

CWE-23 — Relative Path Traversal

References

cve@mitre.org (Product)
cve@mitre.org (Exploit, Third Party Advisory, Mitigation)

Frequently asked questions

What is CVE-2025-44163?: CVE-2025-44163 is a medium-severity vulnerability in Raspap Raspap-Webgui, classified under Relative Path Traversal. CVSS score: 6.3/10. Published 2025-06-27.
How severe is CVE-2025-44163?: Medium severity. CVSS v3 base score is 6.3 out of 10.