Proxmox VE Security Advisories: File Creation, XSS, OOB Read, and Firewall Bypass Vulnerabilities

Critical Vulnerability Information 1. PSA-2025-00009-1: Ceph Management - Limited Privilege File Creation Vulnerability Announcement Date: 2025-04-17 Affected Package: pve-manager Details: On systems using the Ceph management stack, highly privileged users can trigger the creation of task log files and their parent directories at locations outside of . This vulnerability does not overwrite existing files. Fixed Versions: pve-manager >= 8.3.6, libpve-common-perl >= 8.3.1 2. PSA-2025-00010-1: libtpm.so/swtpm Out-of-bounds Read Vulnerability Announcement Date: 2025-06-23 Affected Package: libtpm.so Details: An out-of-bounds read vulnerability exists in the TPM functionality integrated into QEMU via the libtpm.c library, potentially rendering the virtual TPM unavailable for QEMU VMs. Fixed Versions: libtpm.so >= 0.9.1+eve1 3. PSA-2025-00011-1: nftables Firewall Lacks Support for OVS Bridge (Technical Preview) Announcement Date: 2025-07-09 Affected Packages: pve-firewall/pve-qemu-server/pve-container Details: When using the nftables firewall implementation, OVS bridges used for guest VMs are not filtered by rules if the intermediate firewall bridge is not configured. Fixed Versions: pve-firewall >= 5.1.2, pve-container >= 3.7.7, qemu-server >= 8.3.14 4. PSA-2025-00012-1: Grub2 NTFS Module Not Fully Excluded Under Secure Boot Announcement Date: 2025-07-10 Affected Package: grub2-amd64-signed >= 2.06+3+pve6 Details: The NTFS filesystem is not properly excluded due to permission issues. 5. PSA-2025-00013-1: Storage XSS in Configuration Values Announcement Date: 2025-08-14 Affected Package: pve-manager Details: The HTTP proxy, WebDAV, and UPnP settings dialog boxes in the web interface are vulnerable to XSS attacks. Fixed Versions: pve-manager >= 9.0.1 (PVE 9.x), pve-manager >= 8.4.11 (PVE 8.x)

Goal Reached Thanks to every supporter — we hit 100%!

Proxmox VE Security Advisories: File Creation, XSS, OOB Read, and Firewall Bypass Vulnerabilities