Cyber Resilience

CVE-2025-7404

MediumPublic PoCRCE

Published: 24 July 2025

Published
24 July 2025
Modified
16 January 2026
KEV Added
—
Patch
—
CVSS Score v4 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score 0.0233 85.2th percentile
Risk Priority 13 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-7404 is a medium-severity OS Command Injection (CWE-78) vulnerability in Gelbphoenix Autocaliweb. Its CVSS base score is 5.9 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 14.8% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).

Deeper analysis

CVE-2025-7404 is a blind OS command injection vulnerability arising from improper neutralization of special elements in OS commands, tracked under CWE-78. It affects Calibre Web version 0.6.24 (Nicolette) and Autocaliweb versions 0.7.0 up to but not including 0.7.1. The flaw carries a CVSS 4.0 score of 5.9, reflecting network attack vector, low attack complexity, required high privileges, and impacts limited to integrity and high availability.

An authenticated high-privilege user can supply crafted input that results in blind execution of operating system commands on the underlying host. Successful exploitation allows the attacker to achieve limited integrity changes and denial-of-service conditions without direct command output visibility.

Public advisories referencing the issue are available at fluidattacks.com/advisories/kino, while the affected projects are maintained at github.com/janeczku/calibre-web and github.com/gelbphoenix/autocaliweb. The associated EPSS score has remained flat at 0.0233 with no material increase since disclosure.

EU & UK References

Vulnerability details

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Calibre Web, Autocaliweb allows Blind OS Command Injection.This issue affects Calibre Web: 0.6.24 (Nicolette); Autocaliweb: from 0.7.0 before 0.7.1.

CWE(s)
CWE-78

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
attack.mitre.org →
T1059.004 Unix Shell Execution
Adversaries may abuse Unix shell commands and scripts for execution.
attack.mitre.org →
Why these techniques?

OS command injection in public-facing web app directly enables remote unauthenticated exploitation (T1190) leading to arbitrary Unix shell command execution (T1059.004).

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

CVEs Like This One

CVE-2026-42454Shared CWE-78
CVE-2026-34796Shared CWE-78
CVE-2024-57016Shared CWE-78
CVE-2025-50475Shared CWE-78
CVE-2024-57015Shared CWE-78
CVE-2026-36828Shared CWE-78
CVE-2024-57595Shared CWE-78
CVE-2026-25196Shared CWE-78
CVE-2024-50566Shared CWE-78
CVE-2026-23592Shared CWE-78

Affected Assets

gelbphoenix
autocaliweb
0.7.0
janeczku
calibre-web
0.6.24

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

SI-10 Information Input Validation good match
prevent

SI-10 requires comprehensive input validation and neutralization of special elements at application entry points, directly preventing OS command injection exploits like CVE-2025-7404.

SI-2 Flaw Remediation good match
prevent

SI-2 mandates timely flaw remediation, including patching vulnerable versions of Calibre Web 0.6.24 and Autocaliweb <0.7.1 to the fixed releases.

AC-6 Least Privilege partial match
prevent

AC-6 enforces least privilege on the application process, limiting the scope and impact of arbitrary OS commands executed via injection in CVE-2025-7404.

References