CVE-2025-50688 Command injection in n/a
Attackers can execute arbitrary commands via crafted HTTP PUT requests in TwistedWeb, leading to remote code execution and potential privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-50688?
CVE-2025-50688 is a medium-severity command injection vulnerability in n/a, published on 5 Aug 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A command injection vulnerability exists in TwistedWeb (version 14.0.0) due to improper input sanitization in the file upload functionality. An attacker can exploit this vulnerability by sending a specially crafted HTTP PUT request to upload a malicious file (e.g., a reverse shell script). Once uploaded, the attacker can trigger the execution of arbitrary commands on the target system, allowing for remote code execution. This could lead to escalation of privileges depending on the privileges of the web server process. The attack does not require physical access and can be conducted remotely, posing a significant risk to the confidentiality and integrity of the system.
Weakness: CWE-77
Which versions are affected by CVE-2025-50688?
It affects 1 product.
Products include Twistedmatrix Twistedweb.
How do I fix CVE-2025-50688?
No fix published yet.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2025-50688 being exploited?
There is no known exploitation of CVE-2025-50688 in the wild and no public exploit code.
Sources
Also known as CLEANSTART-2026-JK26072, GHSA-gg78-p23v-xc7m.