CVE-2025-64726

Socket Firewall is an HTTP/HTTPS proxy server that intercepts package manager requests and enforces security policies by blocking dangerous packages. Socket Firewall binary versions (separate from installers) prior to 0.15.5 are vulnerable to arbitrary code execution when run in untrusted project directories. The vulnerability allows an attacker to execute arbitrary code by placing a malicious `.sfw.config` file in a project directory. When a developer runs Socket Firewall commands (e.g., `sfw npm install`) in that directory, the tool loads the `.sfw.config` file and populates environment variables directly into the Node.js process. An attacker can exploit this by setting `NODE_OPTIONS` with a `--require` directive to execute malicious JavaScript code before Socket Firewall's security controls are initialized, effectively bypassing the tool's malicious package detection. The attack vector is indirect and requires a developer to install dependencies for an untrusted project and execute a command within the context of the untrusted project. The vulnerability has been patched in Socket Firewall version 0.15.5. Users should upgrade to version 0.15.5 or later. The fix isolates configuration file values from subprocess environments. Look at `sfw --version` for version information. If users rely on the recommended installation mechanism (e.g. global installation via `npm install -g sfw`) then no workaround is necessary. This wrapper package automatically ensures that users are running the latest version of Socket Firewall. Users who have manually installed the binary and cannot immediately upgrade should avoid running Socket Firewall in untrusted project directories. Before running Socket Firewall in any new project, inspect `.sfw.config` and `.env.local` files for suspicious `NODE_OPTIONS` or other environment variable definitions that reference local files.

• CWE-15
• CWE-427

• https://bsky.app/profile/evilpacket.net/post/3m4iylwxtns2t
• https://github.com/SocketDev/firewall-release/security/advisories/GHSA-6c5p-vqrh-h6fp

Published

Nov 13, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-6472A vulnerability, which was classified as critical, has been …9.8
• CVE-2025-64720LIBPNG is a reference library for use in applications that r…7.1
• CVE-2025-64721Sandboxie is a sandbox-based isolation software for 32-bit a…10
• CVE-2025-64723Arduino IDE is an integrated development environment. Prior …4.4
• CVE-2025-64724Arduino IDE is an integrated development environment. Prior …7.3
• CVE-2025-64725Weblate is a web based localization tool. In versions prior …9.8
• CVE-2025-64729The vulnerability, if exploited, could allow an authenticate…8.2
• CVE-2025-6473A vulnerability, which was classified as problematic, was fo…6.1
• CVE-2025-64730Cross-site scripting vulnerability exists in SNC-CX600W all …6.1
• CVE-2025-64733An out-of-bounds read vulnerability exists in the EMF functi…7.1
• CVE-2025-64734Missing Release of Resource after Effective Lifetime (CWE-77…2.4
• CVE-2025-64735An out-of-bounds read vulnerability exists in the EMF functi…7.1