CVE-2025-27422 FACTION Allows Authentication Bypass via User Creation
Attackers can bypass authentication by registering a new user with admin privileges, leading to full system compromise.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-27422?
CVE-2025-27422 is a high-severity authentication bypass vulnerability in factionsecurity faction, published on 3 Mar 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
FACTION is a PenTesting Report Generation and Collaboration Framework. Authentication is bypassed when an attacker registers a new user with admin privileges. This is possible at any time without any authorization. The request must follow the validation rules (no missing information, secure password, etc) but there are no other controls stopping them. This vulnerability is fixed in 1.4.3.
Weakness: CWE-287
Which versions are affected by CVE-2025-27422?
How do I fix CVE-2025-27422?
No fix has been published for CVE-2025-27422 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2025-27422 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-27422 exists.
Sources
Also known as GHSA-97cv-f342-v2jc.