CVE-2025-24364
Dani-Garcia Vaultwarden ≤ 1.33.0
Raw vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HSummary
CVE-2025-24364 is a high-severity Injection (CWE-74) vulnerability in Dani-Garcia Vaultwarden. Its CVSS base score is 7.2 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 40% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified map to SI-10 (Information Input Validation) — see the control section below for these in your framework.
Deeper analysis AI-assisted summary
Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.
Vaultwarden, an unofficial Bitwarden-compatible password server written in Rust, contains a command-injection vulnerability tracked as CVE-2025-24364. An authenticated administrator with access to the admin panel can alter mail-transport settings to invoke sendmail with attacker-controlled arguments and then supply a specially crafted favicon image containing embedded shell commands that execute when the server performs actions such as sending a test message. The flaw is classified under CWE-74 and carries a CVSS 3.1 score of 7.2.
An attacker who already possesses valid administrative credentials can therefore achieve arbitrary code execution on the underlying host. The attack requires no user interaction beyond the initial authenticated session and can result in full confidentiality, integrity, and availability impact on the system.
The issue is resolved in Vaultwarden 1.33.0, as stated in the project’s GitHub release notes and the accompanying security advisory GHSA-h6cc-rc6q-23j4. Administrators are advised to upgrade promptly and to restrict administrative-panel access to trusted networks or identities.
EPSS for the CVE rose from lower values to a recorded peak of 0.0216 on 2025-12-11 before receding to the current 0.0099, indicating a measurable but temporary increase in exploitation interest after public disclosure.
OWASP Top 10 for Web (2025)
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-3678
Vulnerability Data
vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Attacker with authenticated access to the vaultwarden admin panel can execute arbitrary code in the system. The attacker could then change some settings to use sendmail…
more
as mail agent but adjust the settings in such a way that it would use a shell command. It then also needed to craft a special favicon image which would have the commands embedded to run during for example sending a test email. This vulnerability is fixed in 1.33.0.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise Techniques
CVEs Like This One
Affected Assets
Mitigating Controls
Control response
—
—
—
V1.2.1V1.2.3V1.2.5V1.2.8
Mitigating Controls (NIST 800-53 r5) AI
SI-10 directly requires validation of information inputs to reject malformed or special-element content before it reaches downstream parsers.
Mitigating Controls (NIST CSF 2.0) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.
Secure SDLC practices directly require input validation and output encoding that prevent injection flaws.
Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.
Security testing in development catches injection vulnerabilities before release.
Logging supports detection of injection attempts but does not prevent the weakness.
Monitoring activities can identify active injection attacks after they occur.
Secure development life cycle mandates input validation and output encoding that directly prevent injection flaws.
Application security requirements explicitly call for controls against injection attacks in software design.
Secure architecture principles reduce injection surfaces but do not prescribe specific neutralization techniques.