CVE-2025-68932

Critical

Published: 27/12/2025(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

FreshRSS prior to version 1.28.0 uses cryptographically weak random number generators (mt_rand() and uniqid()) to generate remember-me authentication tokens and challenge-response nonces. This allows attackers to predict valid session tokens, leading to account takeover through persistent session hijacking.

Risk Assessment

Attackers can hijack user sessions, including administrators, potentially leading to unauthorized access to data and application functions.

Recommendation

Update FreshRSS to version 1.28.0 or later, which includes the fix.

Original NVD description (English source)

FreshRSS is a free, self-hostable RSS aggregator. Prior to version 1.28.0, FreshRSS uses cryptographically weak random number generators (mt_rand() and uniqid()) to generate remember-me authentication tokens and challenge-response nonces. This allows attackers to predict valid session tokens, leading to account takeover through persistent session hijacking. The remember-me tokens provide permanent authentication and are the sole credential for "keep me logged in" functionality. This issue has been patched in version 1.28.0.