CVE-2025-48929 Auth bypass in service
Attackers can reuse long-lived credentials to hijack accounts if the credentials are discovered, affecting TeleMessage service users.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-48929?
CVE-2025-48929 is a medium-severity authentication bypass vulnerability in TeleMessage service, published on 28 May 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The TeleMessage service through 2025-05-05 implements authentication through a long-lived credential (e.g., not a token with a short expiration time) that can be reused at a later date if discovered by an adversary.
Which versions are affected by CVE-2025-48929?
It affects 1 product.
Products include Smarsh Telemessage.
How do I fix CVE-2025-48929?
No fix has been published for CVE-2025-48929 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2025-48929 being exploited?
There is no known exploitation of CVE-2025-48929 in the wild and no public exploit code.
Other vulnerabilities in TeleMessage service
- CVE-2025-48927 TeleMessage TM SGNL Initialization of a Resource with an Insecure Default
- CVE-2025-48928 TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere
- CVE-2025-47730 Hardcoded credentials in archiving backend
- CVE-2025-48925 Weak cryptography in service
- CVE-2025-48926 Information disclosure in service
Sources
Also known as GHSA-5wx3-hjmf-qcgx.