CVE-2025-34392 Barracuda RMM < 2025.1.1 Service Center Absolute Path Traversal RCE
Attackers can achieve remote code execution via arbitrary file write by exploiting absolute path traversal in Barracuda RMM Service Center.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-34392?
CVE-2025-34392 is a critical path traversal vulnerability in Barracuda Networks RMM, published on 10 Dec 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not verify the URL defined in an attacker-controlled WSDL that is later loaded by the application. This can lead to arbitrary file write and remote code execution via webshell upload.
Weakness: CWE-36
Which versions are affected by CVE-2025-34392?
It affects 1 product.
Products include Barracuda Rmm.
How do I fix CVE-2025-34392?
No fix has been published for CVE-2025-34392 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2025-34392 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-34392 exists.
Other vulnerabilities in Barracuda Networks RMM
Sources
Also known as GHSA-r5wc-8hr9-ggp3.