CVE-2025-50674

HighCVSS 7.8/10Last modified Jul 5, 2026

Description

An issue was discovered in the changePassword method in file /usr/share/php/openmediavault/system/user.inc in OpenMediaVault 7.4.17 allowing local authenticated attackers to escalate privileges to root.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20 CWE-269

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://gist.github.com/xbz0n/4b98e9291ddd5bb5e6232609e36b2082Exploit, Third Party Advisory
https://xbz0n.sh/blog/CVE-2025-50674Exploit, Mitigation, Third Party Advisory

Timeline

Published: Aug 22, 2025
Last modified: Jul 5, 2026
NVD status: Modified

Related CVEs from 2025

CVE-2025-506757.8GPMAW 14, a bioinformatics software, has a critical vulnerability related to insecure file permissions in its installation directory. The di CVE-2025-50688.8Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a craft CVE-2025-506817.5igmpproxy 0.4 before commit 2b30c36 allows remote attackers to cause a denial of service (application crash) via a crafted IGMPv3 membership CVE-2025-506886.5A command injection vulnerability exists in TwistedWeb (version 14.0.0) due to improper input sanitization in the file upload functionality.CVE-2025-50696.5An issue has been discovered in GitLab CE/EE affecting all versions from 17.10 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 tha CVE-2025-506906.1A Cross-Site Scripting (XSS) vulnerability exists in SpatialReference.org (OSGeo/spatialreference.org) versions prior to 2025-05-17 (commit CVE-2025-506915.3MCSManager 10.5.3 daemon process runs as a root account by default, and its sensitive data (including tokens and terminal content) is stored CVE-2025-506929.8FoxCMS <=v1.2.5 is vulnerable to Code Execution in admin/template_file/editFile.html.CVE-2025-506936.5PHPGurukul Online DJ Booking Management System 2.0 is vulnerable to Insecure Direct Object Reference (IDOR) in odms/request-details.php.CVE-2025-506956.1PHPGurukul Online DJ Booking Management System 2.0 is vulnerable to Cross Site Scripting (XSS) in /admin/view-booking-detail.php and /admin/CVE-2025-506996.1PHPGurukul Online DJ Booking Management System 2.0 is vulnerable to Cross Site Scripting (XSS) in odms/admin/view-user-queries.php.CVE-2025-507069.8An issue in thinkphp v.5.1 allows a remote attacker to execute arbitrary code via the routecheck function