CVE-2025-34469

Cowrie versions prior to 2.9.0 contain a server-side request forgery (SSRF) vulnerability in the emulated shell implementation of wget and curl. In the default emulated shell configuration, these command emulations perform real outbound HTTP requests to attacker-supplied destinations. Because no outbound request rate limiting was enforced, unauthenticated remote attackers could repeatedly invoke these commands to generate unbounded HTTP traffic toward arbitrary third-party targets, allowing the Cowrie honeypot to be abused as a denial-of-service amplification node and masking the attacker’s true source address behind the honeypot’s IP.

• CWE-918

• https://github.com/advisories/GHSA-83jg-m2pm-4jxjExploit, Third Party Advisory
• https://github.com/cowrie/cowrie/issues/2622Exploit, Issue Tracking
• https://github.com/cowrie/cowrie/pull/2800Exploit, Issue Tracking, Patch
• https://github.com/cowrie/cowrie/releases/tag/v2.9.0Release Notes
• https://www.vulncheck.com/advisories/cowrie-unrestricted-wget-curl-emulation-enables-ssrf-based-ddos-amplificationThird Party Advisory
• https://github.com/advisories/GHSA-83jg-m2pm-4jxjExploit, Third Party Advisory

Published

Dec 31, 2025

Last Modified

Sep 23, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-34463Rejected reason: This CVE ID was rejected because it was res…
• CVE-2025-34464Rejected reason: This CVE ID was rejected because it was res…
• CVE-2025-34465Rejected reason: This CVE ID was rejected because it was res…
• CVE-2025-34466Rejected reason: This CVE ID was rejected because it was res…
• CVE-2025-34467ZwiiCMS versions prior to 13.7.00 contain a denial-of-servic…4.3
• CVE-2025-34468libcoap versions up to and including 4.3.5, prior to commit …9.8
• CVE-2025-34470Rejected reason: This CVE ID was rejected because it was res…
• CVE-2025-34471Rejected reason: This CVE ID was rejected because it was res…
• CVE-2025-34472Rejected reason: This CVE ID was rejected because it was res…
• CVE-2025-34473Rejected reason: This CVE ID was rejected because it was res…
• CVE-2025-34474Rejected reason: This CVE ID was rejected because it was res…
• CVE-2025-34475Rejected reason: This CVE ID was rejected because it was res…