SQL Injection in Librenms
CVE-2025-65093
LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.11.0, a boolean-based blind SQL injection vulnerability was identified in the LibreNMS application at the /ajax_output.php endpoint. The hostname parameter is interpolated directly into an SQL query without proper sanitization or parameter binding, allowing an attacker to manipulate the query logic and infer data from the database through conditional responses. This issue has been patched in version 25.11.0.
Vulnerability class: SQL Injection
EPSS: 0.036 (88.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N.
Affected products
- Librenms — versions < 25.11.0
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM, Exploit, Vendor Advisory)
Frequently asked questions
- What is CVE-2025-65093?
- CVE-2025-65093 is a medium-severity vulnerability in Librenms, classified under SQL Injection. CVSS score: 5.5/10. Published 2025-11-18.
- How severe is CVE-2025-65093?
- Medium severity. CVSS v3 base score is 5.5 out of 10.