CVE-2025-34095
Last modified
CVE-2025-34095 is a critical-severity vulnerability rated 9.3/10 on the CVSS scale. An OS command injection vulnerability exists in Mako Server versions 2.5 and 2.6, specifically within the tutorial interface provided by the examples/save.lsp endpoint. An unauthenticated attacker can send a crafted PUT request containing arbitrary Lua os.execute() code, which is then persisted on disk and triggered via a subsequent GET request to examples/manage.lsp. EPSS estimates a 4.42% chance of exploitation in the next 30 days.
Description
An OS command injection vulnerability exists in Mako Server versions 2.5 and 2.6, specifically within the tutorial interface provided by the examples/save.lsp endpoint. An unauthenticated attacker can send a crafted PUT request containing arbitrary Lua os.execute() code, which is then persisted on disk and triggered via a subsequent GET request to examples/manage.lsp. This allows remote command execution on the underlying operating system, impacting both Windows and Unix-based deployments.
Metrics
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-34095?
How severe is CVE-2025-34095?
How do I fix CVE-2025-34095?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-3409A vulnerability classified as critical has been found in Not…8.8
- CVE-2025-34090Rejected reason: Neither filed by Chrome nor a valid securit…
- CVE-2025-34091Rejected reason: Neither filed by Chrome nor a valid securit…
- CVE-2025-34092Rejected reason: Neither filed by Chrome nor a valid securit…
- CVE-2025-34093An authenticated command injection vulnerability exists in t…7.5
- CVE-2025-34094Rejected reason: This CVE ID was rejected because it was res…
- CVE-2025-34096A stack-based buffer overflow vulnerability exists in Easy F…9.3
- CVE-2025-34097An unrestricted file upload vulnerability exists in ProcessM…8.6
- CVE-2025-34098A path traversal vulnerability exists in Riverbed SteelHead …7.1
- CVE-2025-34099An unauthenticated command injection vulnerability exists in…9.3
- CVE-2025-3410A vulnerability classified as critical was found in mymagicp…8.8
- CVE-2025-34100An unrestricted file upload vulnerability exists in BuilderE…9.3
Are you affected by CVE-2025-34095?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST