CVE-2025-55472

MediumCVSS 6.5

Published: 02/09/2025(UTC)Updated: 07/11/2026(UTC)Translated: 07/11/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.37%

31th percentile - higher than 31% of all known CVEs

Summary

SQL Injection vulnerability exists in Tirreno v0.9.5, specifically in the /admin/loadUsers API endpoint. The vulnerability arises due to unsafe handling of user-supplied input in the columns[0][data] parameter, which is directly used in SQL queries without proper validation or parameterization.

Risk Assessment

An attacker can execute arbitrary SQL queries, potentially leading to data leakage, modification, or deletion, and potential system compromise.

Recommendation

Update Tirreno to a patched version or implement input validation and parameterized SQL queries for the columns[0][data] parameter; restrict access to the /admin/loadUsers endpoint.

Other vulnerabilities in Tirreno

CVE-2026-64857Medium
tirreno, a security framework, has a session fixation issue in versions prior to 0.10.0. During authentication, tirreno validates the user's credentials and establishes the authenticated session, but it does not call `session_regenerate_id()` afterward. As a result, the session identifier is not rotated on login, it stays the same before and after authentication. An attacker able to fix a known session identifier in a victim's browser (for example through a network man-in-the-middle position, or a separate cross-site scripting or subdomain cookie-injection issue) could then gain access to the victim's authenticated session. The issue is fixed in v0.10.0. The session identifier is now regenerated on successful authentication, and the previous session is destroyed. There is no configuration-level workaround.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS