CVE-2025-48868

Horilla is a free and open source Human Resource Management System (HRMS). An authenticated Remote Code Execution (RCE) vulnerability exists in Horilla 1.3.0 due to the unsafe use of Python’s eval() function on a user-controlled query parameter in the project_bulk_archive view. This allows privileged users (e.g., administrators) to execute arbitrary system commands on the server. While having Django’s DEBUG=True makes exploitation visibly easier by returning command output in the HTTP response, this is not required. The vulnerability can still be exploited in DEBUG=False mode by using blind payloads such as a reverse shell, leading to full remote code execution. This issue has been patched in version 1.3.1.

• CWE-95

• https://drive.google.com/file/d/1XQAJilt77QxkjGEa94CsZRqZIZXa3ET9/view?usp=sharingExploit
• https://drive.google.com/file/d/1hnI9AK3fnpVrTlTRF7aRJsKhZCDIm2Ve/view?usp=sharingExploit
• https://github.com/horilla-opensource/horilla/commit/b0aab62b3a5fe6b7114b5c58db129b3744b4d8ccPatch
• https://github.com/horilla-opensource/horilla/security/advisories/GHSA-h6qj-pwmx-wjhwExploit, Vendor Advisory

Published

Sep 24, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-48862Ambiguous wording in the web interface of the ctrlX OS setup…7.1
• CVE-2025-48863Rejected reason: This CVE id was assigned but later discarde…
• CVE-2025-48864Rejected reason: This CVE id was assigned but later discarde…
• CVE-2025-48865Fabio is an HTTP(S) and TCP router for deploying application…9.1
• CVE-2025-48866ModSecurity is an open source, cross platform web applicatio…7.5
• CVE-2025-48867Horilla is a free and open source Human Resource Management …4.8
• CVE-2025-48869Horilla is a free and open source Human Resource Management …7.5
• CVE-2025-4887A vulnerability, which was classified as problematic, has be…8.8
• CVE-2025-48870Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2025-48871Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2025-48872Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2025-48873Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…