CVE-2025-53392 Path traversal in pfSense

Medium 5.0 Published 28 Jun 2025 Updated 30 Jun 2025

Privileged users can read arbitrary files via directory traversal in pfSense diagnostics, though vendor claims this is intended behavior.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2025-53392?

CVE-2025-53392 is a medium-severity path traversal vulnerability in Netgate pfSense, published on 28 Jun 2025. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

In Netgate pfSense CE 2.8.0, the "WebCfg - Diagnostics: Command" privilege allows reading arbitrary files via diag_command.php dlPath directory traversal. NOTE: the Supplier's perspective is that this is intended behavior for this privilege level, and that system administrators are informed through both the product documentation and UI.

Weakness: CWE-36

Which versions are affected by CVE-2025-53392?

It affects 1 product.

Products include Pfsense Pfsense.

How do I fix CVE-2025-53392?

No fix has been published for CVE-2025-53392 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2025-53392 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-53392 exists.

Public exploit code: 1 proofs of concept on GitHub.

Sources

Also known as GHSA-7hr6-mvjp-x5qv.