CVE-2025-46093

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

LiquidFiles before 4.1.2 supports FTP SITE CHMOD for mode 6777 (setuid and setgid), which allows FTPDrop users to execute arbitrary code as root by leveraging the Actionscript feature and the sudoers configuration.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-732

Affected software

Vendor	Product	Versions
LiquidFiles	LiquidFiles	< 4.1.2

References

https://docs.liquidfiles.com/release_notes/version_4-1-x.htmlRelease Notes
https://gist.github.com/nikolai0x/f61a8bfcdaa244e0c46931d74d10c4eaThird Party Advisory
https://projectblack.io/blog/liquidfiles-vulnerability-authenticated-rce/Exploit, Third Party Advisory
https://projectblack.io/blog/liquidfiles-vulnerability-authenticated-rce/Exploit, Third Party Advisory

Timeline

Published: Aug 4, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-460943.8LiquidFiles before 4.1.2 allows directory traversal by configuring the pathname of a local executable file as an Actionscript.CVE-2025-460966.1Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component CVE-2025-460997.2In Pluck CMS 4.7.20-dev, an authenticated attacker can upload or create a crafted PHP file under the albums module directory and access it v CVE-2025-46106.4The WP-Members Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpmem_user_memberships s CVE-2025-461019.8SQL Injection vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Reference Model (SCORM) version bef CVE-2025-461025.4Cross Site Scripting vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Reference Model (SCORM) vers CVE-2025-461089.8D-link Dir-513 A1FW110 is vulnerable to Buffer Overflow in the function formTcpipSetup.CVE-2025-461098.8SQL Injection vulnerability in pbootCMS v.3.2.5 and v.3.2.10 allows a remote attacker to obtain sensitive information via a crafted GET requ CVE-2025-46116.4The Slim SEO – Fast & Automated WordPress SEO Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's slim CVE-2025-461157.5An issue in open5gs v.2.7.3 allows a remote attacker to cause a denial of service via a crafted PDU Session Modification Request CVE-2025-461168.8An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.CVE-2025-461179.1An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.