CVE-2025-53545 Press has a potential 2FA bypass
Attackers can bypass two-factor authentication on Frappe Cloud due to missing server-side validation, potentially taking over user accounts.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-53545?
CVE-2025-53545 is a medium-severity authentication bypass vulnerability in frappe press, published on 8 Jul 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service (SaaS). Users can circumvent 2FA login for users due to a lack of server side validation for the same. This vulnerability is fixed in commit ddb439f8eb1816010f2ef653a908648b71f9bba8.
Weakness: CWE-287
Which versions are affected by CVE-2025-53545?
How do I fix CVE-2025-53545?
No fix has been published for CVE-2025-53545 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2025-53545 being exploited?
There is no known exploitation of CVE-2025-53545 in the wild and no public exploit code.
Sources
Also known as GHSA-fwfh-vhjg-45q4.