CVE-2025-67041 Lantronix EDS3000PS OS Command Injection

High 8.6 Published 11 Mar 2026 Updated 4 Sep 2026

Attackers can execute arbitrary commands with root privileges via unsanitized TFTP host parameters in the Filesystem Browser.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2025-67041?

CVE-2025-67041 is a high-severity command injection vulnerability in Lantronix EDS3000PS series, published on 11 Mar 2026. An attacker needs administrator access to exploit it, with no action from the victim.

Official description

An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The host parameter of the TFTP client in the Filesystem Browser page is not properly sanitized. This can be exploited to escape from the original command and execute an arbitrary one with root privileges.

Weakness: CWE-620, CWE-288, CWE-78

Which versions are affected by CVE-2025-67041?

It affects 2 products.

Products include Lantronix Eds3008ps1ns Firmware, Lantronix Eds3016ps1ns Firmware.

How do I fix CVE-2025-67041?

No fix has been published for CVE-2025-67041 yet. Limit exposure of the affected software until one is available.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2025-67041 being exploited?

There is no known exploitation of CVE-2025-67041 in the wild and no public exploit code.

Sources

Also known as CVE-2025-67045, GHSA-x7x6-qwq2-55xh.